CVE-2021-22506

Mode C: Affected product is Micro Focus Access Manager prior to version 5.0. The connected documents describe an Information Leakage vulnerability (CVE-2021-22506) in the Access Manager, arising from an advance configuration exposure that could disclose information. The Nessus entry additionally ...

CVE-2021-22531

The CVE-2021-22531 issue affects NetIQ Access Manager 4.5 and 5.0. Affected component: input parameter handling in Access Manager. Root cause: improper handling allows supply of an invalid character, enabling cross-site scripting (XSS). Impact: XSS vulnerability in affected deployments. Exploitat...

CVE-2014-5217

CVE-2014-5217 affects NetIQ Access Manager (NAM) 4.x prior to 4.1. The CSRF in the webacc servlet allows an authenticated admin session to change the administrative password via fw.SetPassword. The vulnerability requires an authenticated administrator and is documented alongside other issues (XXE...

CVE-2014-5214

The CVE-2014-5214 issue affects NetIQ Access Manager (NAM) 4.x, specifically the iManager Administration Console's nps/servlet/webacc component. It enables an XML External Entity (XXE) injection via a query parameter containing an XML entity declaration, allowing remote authenticated novlwww user...

CVE-2014-5216

NetIQ Access Manager (NAM) 4.x is affected by multiple reflected XSS vulnerabilities (CVE-2014-5216) in NAM prior to 4.0.1 HF3. The issues allow remote attackers to inject arbitrary script via (1) location in dev.Empty to nps/servlet/webacc, (2) error in nidp/jsp/x509err.jsp, (3) lang in sslvpn/a...

CVE-2020-25840

The CVE-2020-25840 entry concerns a Cross‑Site Scripting (XSS) vulnerability in Micro Focus Access Manager. Affected software is Micro Focus Access Manager prior to version 5.0. The underlying impact described is potential configuration destruction. No explicit exploit details or in‑the‑wild indi...

CVE-2014-9412

Technical details for CVE-2014-9412 are not publicly available in the provided documents; monitor for updates.

CVE-2018-12480

The CVE-2018-12480 entry concerns a cross-site scripting (XSS) vulnerability in Micro Focus NetIQ Access Manager prior to version 4.4 SP3. The provided documents indicate the issue affects NetIQ Access Manager and is mitigated by upgrades to 4.4 SP3 or later, but do not detail the root cause beyo...

CVE-2018-17948

The vulnerability CVE-2018-17948 is described as an open redirect in the Access Manager Identity Provider prior to 4.4 SP3. The primary documented impact areas are limited to the redirect mechanism; CVSS metrics indicate a MEDIUM severity (CVSS v3.0: 6.1) with NETWORK access, no privileges requir...

CVE-2014-5215

NetIQ Access Manager (NAM) 4.x prior to 4.0.1 HF3 is affected by CVE-2014-5215. An authenticated administrator can disclose service-account passwords via requests to roma/jsp/volsc/monitoring/dev_services.jsp or roma/jsp/debug/debug.jsp, constituting an information-disclosure vulnerability (impac...

CVE-2021-22526

CVE-2021-22526 is an Open Redirect vulnerability in NetIQ Access Manager. Connected sources confirm the issue affects versions prior to 5.0.1 and 4.5.4 . Reported root cause described as an open redirection vulnerability; no detailed exploit path is provided in the documents. Mitigation/Remediati...

CVE-2021-22524

CVE-2021-22524 affects NetIQ Access Manager prior to versions 5.0.1 and 4.5.4. The issue is an injection attack that can cause a Denial of Service. The vulnerability details are documented across multiple sources, with CVSS notes indicating a network-remote vector and partial availability impact....

CVE-2021-22528

NetIQ Access Manager (prior to 5.0.1 and 4.5.4) has a reflected Cross-Site Scripting (XSS) vulnerability (CVE-2021-22528). The affected component is the web application interface; the underlying issue is untrusted input reflected in the response, enabling an attacker to potentially obtain adminis...

CVE-2021-22496

CVE-2021-22496 describes an authentication bypass vulnerability in Micro Focus Access Manager (including the Appliance), affecting all versions prior to 4.5.3.3. The flaw enables bypassing authentication and can lead to information leakage as described in multiple sources (NVD, Red Hat, CNVD, etc...

CVE-2021-22527

CVE-2021-22527 affects NetIQ Access Manager where information leakage occurs in versions prior to 5.0.1 and prior to 4.5.4. Multiple sources (NVD, CNVD, CVE records, PT-2021-15128) identify the affected components as NetIQ Access Manager and confirm the issue is an information disclosure vulnerab...

CVE-2021-22525

NetIQ Access Manager CVE-2021-22525 describes an information-leakage vulnerability in NAM prior to version 5.0.1. The root cause is insufficient privilege controls that can disclose sensitive information (confidentiality impact reported as HIGH in CVSS data). Affected product/component: NetIQ Acc...

CVE-2026-11877

CVE-2026-11877 affects OpenText Access Manager prior to 5.1.3. An unauthorised user can modify configuration via API calls, indicating a missing authorization vulnerability. Supported details show the impact is at the configuration level (no data leakage described) with remote network access requ...

CVE-2026-11878

CVE-2026-11878 describes a reflected Cross-Site Scripting (XSS) vulnerability in OpenText Access Manager, affecting the Access Manager releases 5.1 through 5.1.2. The issue arises from improper neutralization of input during web page generation, enabling XSS. According to the provided metrics, th...