CVE-2014-5215: Micro Focus Access Manager

Medium severity, CVSS 4.0. EPSS: 1.8% chance of exploitation in the next 30 days.

NetIQ Access Manager (NAM) 4.x before 4.0.1 HF3 allows remote authenticated administrators to discover service-account passwords via a request to (1) roma/jsp/volsc/monitoring/dev_services.jsp or (2) roma/jsp/debug/debug.jsp.

Affected products

• Micro Focus Access Manager: version 4.0 only; version 4.0.1 only

Published 2014-12-23. Last modified 2026-06-17.