6.3Mittel
CVE-2026-11877Missing Authorization Vulnerability in OpenText Access Manager
Beschreibung
An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.
Schwachstellentyp (CWE):
CWE-648
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| microfocus | access manager | 5.0 – < 5.1 | |
| OpenText | Access Manager | 5.1 – ≤ 5.1.2 |
Referenzen und Patches
- https://portal.microfocus.com/s/article/KM000047450 Vendor Advisory
CPE-Treffer (NVD) (3)
cpe:2.3:a:microfocus:access_manager:*:*:*:*:*:*:*:*≥ 5.0 < 5.1cpe:2.3:a:microfocus:access_manager:5.1:-:*:*:*:*:*:*cpe:2.3:a:microfocus:access_manager:5.1:patch_update_2:*:*:*:*:*:*