Micro Focus Netiq Access Manager vulnerabilities

7 vulnerabilities

Known vulnerabilities in Micro Focus Netiq Access Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2021-22524micro focusnetiq access manager+1
EPSS score
0.65%
Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.46.1CVE-2021-22526micro focusnetiq access manager+1
EPSS score
0.48%
Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.47.5CVE-2021-22527micro focusnetiq access manager+1
EPSS score
0.73%
Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.48CVE-2021-22528micro focusnetiq access manager+1
EPSS score
0.58%
Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.46.1CVE-2022-26325micro focusnetiq access manager+1
EPSS score
0.36%
Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.26.1CVE-2022-26326micro focusnetiq access manager+1
EPSS score
0.37%
Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.210CVE-2017-14803micro focusnetiq access manager+1
EPSS score
34.59%
In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system.