Vendor scorecard
Micro Focus / NetIQ
Micro Focus / NetIQ security disclosure record — CVE volume, CVSS severity mix and product-category breakdown, sourced from the NIST NVD.
CPE: microfocus, netiq
Product families
1
Open in latest
177
Inferred — see methodology
Last disclosure
Jun 24, 2026
01
Product categories
1 trackedCVE volume, severity mix and the inferred latest shipping version per category.
| Category | CVEs | Volume | Severity mix | Open | Inferred latest |
|---|---|---|---|---|---|
| Identity & Access ManagementIdentity & Access Managementidentity_manager, access_manager, edirectory… | 87 | 87 | 4.5.0.2MED |
Each count is distinct CVEs within that category. A CVE affecting more than one category is counted in each, so these can sum to more than the Micro Focus / NetIQ total above.
02
Disclosure trend
12 monthsCumulative CVEs published on or before each month-end over the last 12 months, stacked by CVSS severity. A fixed 12-month window — independent of the date filter above.
- Critical
- High
- Medium
- Low
03
Recent CVEs
12 shownMost recently published, newest first. Each ID links to its NVD record.
| CVE | Severity | CVSS | Summary | Published |
|---|---|---|---|---|
| CVE-2026-11878(opens NVD record) | Medium | 6.1 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS). This issue affects Access Manager: from 5.1 through 5.1.2. | Jun 24, 2026 |
| CVE-2026-11877(opens NVD record) | High | 7.5 | An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3. | Jun 24, 2026 |
| CVE-2021-38133(opens NVD record) | High | 7.4 | Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000. | Sep 12, 2024 |
| CVE-2021-38132(opens NVD record) | Medium | 5.3 | Possible External Service Interaction attack in eDirectory has been discovered in OpenText™ eDirectory. This impact all version before 9.2.6.0000. | Sep 12, 2024 |
| CVE-2021-38131(opens NVD record) | Medium | 5.4 | Possible Cross-Site Scripting (XSS) Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.5.0000. | Sep 12, 2024 |
| CVE-2021-22533(opens NVD record) | Medium | 6.5 | Possible Insertion of Sensitive Information into Log File Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.4.0000. | Sep 12, 2024 |
| CVE-2021-22532(opens NVD record) | High | 7.6 | Possible NLDAP Denial of Service attack Vulnerability in eDirectory has been discovered in OpenText™ eDirectory before 9.2.4.0000. | Sep 12, 2024 |
| CVE-2021-22503(opens NVD record) | Medium | 5.4 | Possible Improper Neutralization of Input During Web Page Generation Vulnerability in eDirectory has been discovered in OpenText™ eDirectory 9.2.3.0000. | Sep 12, 2024 |
| CVE-2020-11843(opens NVD record) | Medium | 6.5 | This allows the information exposure to unauthorized users. This issue affects NetIQ Access Manager using version 4.5 or before | Jun 11, 2024 |
| CVE-2022-26329(opens NVD record) | Low | 1.8 | File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to determine whether a file exists on the filesystem. This issue affects: Micro Focus NetIQ Identity Manager NetIQ Identity Manager versions prior to 4.8.5 on ALL. | Jan 26, 2023 |
| CVE-2021-22531(opens NVD record) | Medium | 6.1 | A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0 | May 12, 2022 |
| CVE-2021-22528(opens NVD record) | High | 8.0 | Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4 | Sep 13, 2021 |
87 CVEs · 1 product families