Microfocus Netiq Access Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Microfocus Netiq Access Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-4555 — CVSS 7.7 (high): Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This…
• CVE-2024-4554 — CVSS 7.3 (high): Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects…
• CVE-2024-4556 — CVSS 5.7 (medium): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText NetIQ Access Manager allows access…
• CVE-2022-26326 — CVSS 4.0 (medium): Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2
• CVE-2022-26325 — CVSS 2.9 (low): Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2