CVE-2026-11877

HIGH

OpenText Access Manager < 5.1.3 - Unauthorized Configuration Modification

Title source: manual

Description

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

References (1)

Core 1

Core References

https://portal.microfocus.com/s/article/KM000047450

Scores

CVSS v3 7.5

EPSS 0.0018

EPSS Percentile 7.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-648

Status published

Products (3)

microfocus/access_manager 5.1 (2 CPE variants)

microfocus/access_manager 5.0 - 5.1

OpenText/Access Manager 5.1 - 5.1.2

Published Jun 24, 2026

Tracked Since Jun 24, 2026