CVE-2021-22506: Micro Focus Access Manager Information Leakage Vulnerability

High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 25.7% chance of exploitation in the next 30 days.

Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage.

Affected products

• Micro Focus Access Manager: before 5.0 (fixed in 5.0)

Published 2021-03-26. Last modified 2026-06-17.