CVE-2021-22524: Micro Focus Access Manager

Medium severity, CVSS 4.9. EPSS: 0.7% chance of exploitation in the next 30 days.

Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

Affected products

• Micro Focus Access Manager: from 4.5.0, before 4.5.4 (fixed in 4.5.4); from 5.0, before 5.0.1 (fixed in 5.0.1)

Published 2021-09-13. Last modified 2026-06-17.