How many Micro Focus access manager CVEs are in CISA KEV?

Yes — 1 of Micro Focus access manager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Micro Focus access manager are affected?

22 distinct Micro Focus access manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Micro Focus access manager CVEs?

Micro Focus access manager's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-648 (Incorrect Use of Privileged APIs).

What is the average severity of Micro Focus access manager CVEs?

The average CVSS base score across Micro Focus access manager's scored CVEs is 6.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Micro Focus

18 CVEs

1 in CISA KEV

Micro Focus access manager Vulnerabilities

Name: Micro Focus access manager vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for access manager by Micro Focus.

18

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

6

Public exploits

PoC or exploit code

6.2

Avg CVSS

2014–2026

Last updated June 24, 2026

Overview

Micro Focus access manager has 18 published CVE records since 2014, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Micro Focus access manager, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Micro Focus access manager's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High5

Medium13

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of Micro Focus access manager's CVEs is confirmed exploited in the wild.

Public exploits

6

6 of Micro Focus access manager's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Micro Focus access manager version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

4.0 <= v <= 4.05 CVEs
4.0.1 <= v <= 4.0.15 CVEs
4.5.0 <= v < 4.5.44 CVEs
5.0 <= v < 5.0.14 CVEs
< 5.02 CVEs
4.4 <= v <= 4.42 CVEs
5.0 <= v < 5.12 CVEs
5.1 <= v <= 5.12 CVEs
< 4.41 CVE
< 4.5.3.31 CVE
< 5.0.11 CVE
4.1 <= v <= 4.11 CVE
4.2 <= v <= 4.21 CVE
4.3 <= v <= 4.31 CVE
4.5 <= v <= 4.51 CVE
5.0 <= v <= 5.01 CVE

Fixed in

5.0.15 CVEs
4.5.44 CVEs
5.02 CVEs
5.12 CVEs
4.41 CVE
4.5.3.31 CVE

Find a version

18 CVEs

Sort

Missing Authorization Vulnerability in OpenText Access Manager
CVE-2026-11877
Patch
CWE-648
Medium · CVSS 6.3
EPSS 0.2% (7th pct)2026-06-24
Reflected Cross-Site Scripting vulnerability in OpenText Access Manager
CVE-2026-11878
Patch
CWE-79
High · CVSS 8.2
EPSS 0.1% (3th pct)2026-06-24
Medium vulnerability · 2022-05-12
CVE-2021-22531
Medium · CVSS 6.1
EPSS 0.5% (41th pct)2022-05-12
Medium vulnerability · 2021-09-13
CVE-2021-22526
Patch
Workaround
CWE-601
Medium · CVSS 6.1
EPSS 0.5% (39th pct)2021-09-13
Medium vulnerability · 2021-09-13
CVE-2021-22524
Patch
Workaround
CWE-91
Medium · CVSS 5.4
EPSS 0.7% (47th pct)2021-09-13
High vulnerability · 2021-09-13
CVE-2021-22527
Patch
Workaround
CWE-200
High · CVSS 7.5
EPSS 0.7% (50th pct)2021-09-13
High vulnerability · 2021-09-13
CVE-2021-22528
Patch
Workaround
CWE-79
High · CVSS 8.0
EPSS 0.6% (44th pct)2021-09-13
Medium vulnerability · 2021-09-02
CVE-2021-22525
Patch
Medium · CVSS 5.5
EPSS 0.2% (15th pct)2021-09-02
Medium vulnerability · 2021-03-26
CVE-2020-25840
Patch
Medium · CVSS 6.1
EPSS 0.6% (45th pct)2021-03-26
High vulnerability · 2021-03-26
CVE-2021-22506
CISA KEV
Public exploit
Patch
Added to CISA KEV 2021-11-03
High · CVSS 8.7
EPSS 25.7% (98th pct)2021-03-26
High vulnerability · 2021-03-25
CVE-2021-22496
Patch
High · CVSS 7.5
EPSS 1.1% (63th pct)2021-03-25
Medium vulnerability · 2018-11-20
CVE-2018-17948
Patch
Medium · CVSS 6.1
EPSS 0.6% (47th pct)2018-11-20
Medium vulnerability · 2018-11-15
CVE-2018-12480
Patch
Medium · CVSS 6.1
EPSS 0.7% (47th pct)2018-11-15
Medium vulnerability · 2014-12-23
CVE-2014-9412
Public exploit
Medium · CVSS 4.3
EPSS 3.2% (87th pct)2014-12-23
Medium vulnerability · 2014-12-23
CVE-2014-5217
Public exploit
Medium · CVSS 6.8
EPSS 1.4% (69th pct)2014-12-23
Medium vulnerability · 2014-12-23
CVE-2014-5216
Public exploit
Medium · CVSS 4.3
EPSS 3.2% (87th pct)2014-12-23
Medium vulnerability · 2014-12-23
CVE-2014-5215
Public exploit
Medium · CVSS 4.0
EPSS 1.8% (76th pct)2014-12-23
Medium vulnerability · 2014-12-23
CVE-2014-5214
Public exploit
Medium · CVSS 4.0
EPSS 1.9% (78th pct)2014-12-23

Common weakness types

The CWE weakness categories most often found in Micro Focus access manager CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Micro Focus access manager CVEs were published each year.

2014

5

2018

2

2021

8

2022

1

2026

2

Other Micro Focus products

Browse vulnerabilities for other products by Micro Focus.

imanager22 CVEs solutions business manager17 CVEs edirectory16 CVEs service manager16 CVEs arcsight management center13 CVEs enterprise developer12 CVEs enterprise server12 CVEs netiq advanced authentication11 CVEs

All Micro Focus vulnerabilities

Frequently asked questions

Common questions about Micro Focus access manager vulnerabilities.

How many CVEs does Micro Focus access manager have?: Micro Focus access manager has 18 published CVE records since 2014.
How many Micro Focus access manager CVEs are in CISA KEV?: Yes — 1 of Micro Focus access manager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Micro Focus access manager vulnerabilities?: Yes — 6 of Micro Focus access manager's CVEs have a known public exploit.
Which versions of Micro Focus access manager are affected?: 22 distinct Micro Focus access manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Micro Focus access manager CVEs?: Micro Focus access manager's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-648 (Incorrect Use of Privileged APIs).
What is the average severity of Micro Focus access manager CVEs?: The average CVSS base score across Micro Focus access manager's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Micro Focus access manager vulnerabilities

Monitor new Micro Focus access manager vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing