Micro Focus Netiq Access Manager vulnerabilities

5 CVEs affecting Micro Focus Netiq Access Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-4556, published 2024-08-28.

More from Micro Focus.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-4556, published 2024-08-28. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access…
• CVE-2022-26326, published 2022-05-02. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2
• CVE-2022-26325, published 2022-05-02. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2
• CVE-2024-4554, published 2024-08-28. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects Access Manager before 5.0.4.1 and 5.1.
• CVE-2024-4555, published 2024-08-28. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before…