opentext Access Manager vulnerabilities

Latest opentext Access Manager CVEs

Newest publication first

1. CVE-2026-11877 Missing Authorization Vulnerability in OpenText Access Manager

   Published 2026-06-24

   Medium·CVSS 6.3 EPSS 0.31%

   An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

2. CVE-2026-11878 Reflected Cross-Site Scripting vulnerability in OpenText Access Manager

   Published 2026-06-24

   High·CVSS 8.2 EPSS 0.22%

   Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS). This issue affects Access Manager: from 5.1 through 5.1.2.

3. CVE-2024-4554 Multiple xss vulnerability in NetIQ Access Manager

   Published 2024-08-28

   Medium·CVSS 5.4 EPSS 0.29%

   Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects Access Manager before 5.0.4.1 and 5.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.