CVE-2021-22528: Micro Focus Access Manager

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4

Affected products

• Micro Focus Access Manager: from 4.5.0, before 4.5.4 (fixed in 4.5.4); from 5.0, before 5.0.1 (fixed in 5.0.1)

Published 2021-09-13. Last modified 2026-06-17.