Access manager

This hub aggregates every CVE we track for Access manager, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Access manager.

• CVE-2026-46812Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily explo...6.1Jun 16, 2026
• CVE-2026-35314Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Web Server Plugin). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitab...7.3Jun 16, 2026
• CVE-2026-35313Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily explo...9.9Jun 16, 2026
• CVE-2026-35261Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily explo...6.5Jun 16, 2026
• CVE-2024-4554Multiple xss vulnerability in NetIQ Access Manager7.3Aug 28, 2024
• CVE-2020-11843Potential information leakage in administrator enabled debug mode6.5Jun 11, 2024
• CVE-2023-21859Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnera...4.4Jan 17, 2023
• CVE-2022-39412Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability all...7.5Oct 18, 2022
• CVE-2022-39405Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerabi...5.3Oct 18, 2022
• CVE-2021-22531A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.06.1May 12, 2022
• CVE-2021-35587Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exp...KEV9.8Jan 19, 2022
• CVE-2021-22526Open Redirection vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.14.9Sep 13, 2021
• CVE-2021-22524Denial of service vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.15.4Sep 13, 2021
• CVE-2021-22527Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.16.0Sep 13, 2021
• CVE-2021-22528Information leakage vulnerability in NetIQ Access Manager versions prior to version 4.5.4 and 5.0.18.0Sep 13, 2021