Micro Focus International

Records274All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical63CVSS 9.0–10.0

CVSS high95CVSS 7.0–8.9

Exploited now

Micro Focus International records in CISA KEV

TI-2021-05471 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-05475 Micro Focus Access Manager Information Leakage Vulnerability CRITICAL 90KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Imanager 22 records MEDIUM Access Manager 18 records CRITICAL Solutions Business Manager 17 records MEDIUM Edirectory 16 records HIGH Service Manager 16 records MEDIUM Enterprise Developer 12 records MEDIUM Enterprise Server 12 records MEDIUM Netiq Advanced Authentication 11 records MEDIUM

Records

18 records in Access Manager · all components

TI-2021-05475 CVE-2021-22506 · GHSA-c5q3-mm7r-f42w

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access…

CRITICAL 90KEV

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.25695 Published 2021-03-26 No fix listed

TI-2021-05496 CVE-2021-22528 · GHSA-xq69-cxjh-f23r

Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

LOW 36

Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00582 Published 2021-09-13 Fixed in 5.0.1 CWE-79

TI-2026-10249 CVE-2026-11878 · GHSA-rrp3-3f6h-33jr

Reflected Cross-Site Scripting vulnerability in OpenText Access Manager

LOW 35

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS).

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00221 Published 2026-06-24 No fix listed CWE-79

TI-2021-05465 CVE-2021-22496 · GHSA-jj6m-7mph-gg9p

Improper authentication in Access Manager

LOW 35

Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01171 Published 2021-03-25 No fix listed CWE-287

TI-2021-05495 CVE-2021-22527 · GHSA-72fc-25pw-pqqj

Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

LOW 34

Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00733 Published 2021-09-13 Fixed in 5.0.1 CWE-200

TI-2014-04266 CVE-2014-5217 · GHSA-wrg8-w9p8-8mv3

Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the…

LOW 33

Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.1 allows remote attackers to hijack the authentication of administrato…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01367 Published 2014-12-23 No fix listed CWE-352

TI-2026-10248 CVE-2026-11877 · GHSA-3frm-wcmv-8jx7

Missing Authorization Vulnerability in OpenText Access Manager

LOW 28

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00305 Published 2026-06-24 No fix listed CWE-648

TI-2021-05499 CVE-2021-22531 · GHSA-6v5p-35px-x3cv

Cross-site scripting in NetIQ Access Manager

LOW 28

A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00565 Published 2022-05-12 No fix listed CWE-79

TI-2021-05494 CVE-2021-22526 · GHSA-3gjc-qgpj-p9mw

Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

LOW 28

Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00485 Published 2021-09-13 Fixed in 5.0.1 CWE-601

TI-2020-15832 CVE-2020-25840 · GHSA-955f-4fpp-56rx

Cross-site scripting in Access Manager.

LOW 28

Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00635 Published 2021-03-26 No fix listed CWE-79

TI-2018-12775 CVE-2018-17948 · GHSA-239m-chp6-538f

An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3.

LOW 28

An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00648 Published 2018-11-20 No fix listed CWE-601

TI-2018-08966 CVE-2018-12480 · GHSA-25gm-f4jj-c4jm

NetIQ Access Manager XSS vulnerability in versions prior to 4.4 SP3

LOW 28

Mitigates an XSS issue in NetIQ Access Manager versions prior to 4.4 SP3.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00654 Published 2018-11-15 Fixed in 4.4 SP3 CWE-79

TI-2014-07639 CVE-2014-9412 · GHSA-m7gh-7492-6ppq

Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML via (1) an arbitrary parameter to roma/jsp/debug/debug.jsp or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03236 Published 2014-12-23 No fix listed CWE-79

TI-2014-04265 CVE-2014-5216 · GHSA-f242-mjwv-h962

Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allow remote attackers to inject arbitrary web script or HTML via (1) the location parameter in a dev.Empty action to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03236 Published 2014-12-23 No fix listed CWE-79

TI-2021-05492 CVE-2021-22524 · GHSA-c2qg-83f7-xwcm

Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.1

LOW 25

Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

CVSS 3.1MEDIUM 5.4 Network High privileges User interaction EPSS 0.00654 Published 2021-09-13 Fixed in 5.0.1 CWE-91

TI-2021-05493 CVE-2021-22525 · GHSA-wfh8-85qf-jrr2

This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1

LOW 24

This release addresses a potential information leakage vulnerability in NetIQ Access Manager versions prior to 5.0.1

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00241 Published 2021-09-02 No fix listed

TI-2014-04263 CVE-2014-5214 · GHSA-2rcg-mhmv-j368

nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access…

LOW 23

nps/servlet/webacc in iManager in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated novlwww users to read arbitrary files via a query parameter containing an…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01922 Published 2014-12-23 No fix listed

TI-2014-04264 CVE-2014-5215 · GHSA-w492-8wmj-crw3

NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated…

LOW 22

NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev_services.jsp or (2) roma/jsp/debug/debug…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0177 Published 2014-12-23 No fix listed CWE-200

Open these records in search →