Product by Micro Focus

    Micro Focus NetIQ Access Manager

    18 known vulnerabilities in Micro Focus NetIQ Access Manager (Micro Focus), 1 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Micro Focus NetIQ Access Manager (Micro Focus)
    CriticalCVE-2021-22506

    Micro Focus Access Manager Information Leakage Vulnerability

    In CISA KEV

    		7.5
    HighCVE-2021-22496

    Access Manager: Authentication Bypass

    		7.5
    Not ratedCVE-2014-5216

    Access Manager.: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2014-9412

    Access Manager.: Cross-Site Scripting (XSS)

    		—
    HighCVE-2026-11878

    Reflected Cross-Site Scripting vulnerability in OpenText Access Manager

    also in 1 other product

    		6.1
    HighCVE-2026-11877

    Missing Authorization Vulnerability in OpenText Access Manager

    also in 1 other product

    		7.5
    HighCVE-2021-22528

    Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    also in 1 other product

    		8.0
    HighCVE-2021-22527

    Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    also in 1 other product

    		6.0
    MediumCVE-2018-12480

    NetIQ Access Manager XSS vulnerability in versions prior to 4.4 SP3

    		6.1
    MediumCVE-2018-17948

    Access Manager: Open Redirect

    		6.1
    Not ratedCVE-2014-5214

    Access Manager.: XML External Entity (XXE)

    		—
    MediumCVE-2020-25840

    Access Manager.: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2021-22531

    NetIQ Access Manager: Cross-Site Scripting (XSS)

    		6.1
    Not ratedCVE-2014-5215

    Access Manager.: security vulnerability

    		—
    MediumCVE-2021-22524

    Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    also in 1 other product

    		5.4
    Not ratedCVE-2014-5217

    Access Manager.: Cross-Site Request Forgery (CSRF)

    		—
    MediumCVE-2021-22526

    Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

    also in 1 other product

    		4.9
    MediumCVE-2021-22525

    Access Manager.: Information Disclosure

    		5.5

    All products by Micro Focus