Skip to content
OpenAdvisories
High · 8.2 CVE-2026-11878 EUVD-2026-38791GHSA-rrp3-3f6h-33jr

Reflected Cross-Site Scripting vulnerability in OpenText Access Manager

Published Jun 24, 2026 · Updated Jun 24, 2026 · Assigned by OpenText

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS).

This issue affects Access Manager: from 5.1 through 5.1.2.

Affected products

VendorProductAffectedFixed
OpenText Access Manager 5.1 – ≤ 5.1.2 —

References