VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 24, 2026· Updated Jun 29, 2026

CVE-2026-11878

CVE-2026-11878

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS).

This issue affects Access Manager: from 5.1 through 5.1.2.

Affected products

5
  • Microfocus/Access Manager4 versions
    cpe:2.3:a:microfocus:access_manager:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microfocus:access_manager:*:*:*:*:*:*:*:*range: >=5.0,<5.1
    • cpe:2.3:a:microfocus:access_manager:5.1:-:*:*:*:*:*:*
    • cpe:2.3:a:microfocus:access_manager:5.1:patch_update_2:*:*:*:*:*:*
    • (no CPE)range: 5.1 - 5.1.2
  • Opentext/Access Managerllm-fuzzy
    Range: 5.1 - 5.1.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.