What is CVE-2021-22531?

CVE-2021-22531 is a vulnerability in NetIQ Access Manager that allows an attacker to trigger a cross-site scripting (XSS) vulnerability by supplying invalid characters in an input parameter.

Which versions of Microfocus Access Manager are affected by CVE-2021-22531?

CVE-2021-22531 affects NetIQ Access Manager versions 4.5 and 5.0.

What is the severity of CVE-2021-22531?

CVE-2021-22531 has a severity rating of 6.1, which is considered medium.

How can I fix CVE-2021-22531?

To fix CVE-2021-22531, it is recommended to update NetIQ Access Manager to the latest version and follow the recommendations provided by Microfocus.

Where can I find more information about CVE-2021-22531?

More information about CVE-2021-22531 can be found in the release notes of NetIQ Access Manager version 5.0, available on the Microfocus documentation website.

Vulnerability/
CVE-2021-22531

medium

6.1

CWE

12/5/2022

3/8/2024

CVE-2021-22531: XSS

First published: Thu May 12 2022(Updated: )

A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0

Credit: security@microfocus.com

Affected Software	Affected Version	How to fix
Microfocus Access Manager	=4.5
Microfocus Access Manager	=4.5-hotfix1
Microfocus Access Manager	=4.5-sp1
Microfocus Access Manager	=4.5-sp1_hotfix1
Microfocus Access Manager	=4.5-sp1_hotfix2
Microfocus Access Manager	=4.5-sp2
Microfocus Access Manager	=4.5-sp2_hotfix1
Microfocus Access Manager	=4.5-sp2_hotfix2
Microfocus Access Manager	=4.5-sp3
Microfocus Access Manager	=4.5-sp3_hotfix1
Microfocus Access Manager	=4.5-sp3_patch3
Microfocus Access Manager	=4.5-sp4
Microfocus Access Manager	=4.5-sp5
Microfocus Access Manager	=5.0
Microfocus Access Manager	=5.0-sp1

Never miss a vulnerability like this again

Reference Links

https://www.microfocus.com/documentation/access-manager/5.0/accessmanager502-release-notes/accessmanager502-release-notes.html

Frequently Asked Questions

What is CVE-2021-22531?
CVE-2021-22531 is a vulnerability in NetIQ Access Manager that allows an attacker to trigger a cross-site scripting (XSS) vulnerability by supplying invalid characters in an input parameter.
Which versions of Microfocus Access Manager are affected by CVE-2021-22531?
CVE-2021-22531 affects NetIQ Access Manager versions 4.5 and 5.0.
What is the severity of CVE-2021-22531?
CVE-2021-22531 has a severity rating of 6.1, which is considered medium.
How can I fix CVE-2021-22531?
To fix CVE-2021-22531, it is recommended to update NetIQ Access Manager to the latest version and follow the recommendations provided by Microfocus.
Where can I find more information about CVE-2021-22531?
More information about CVE-2021-22531 can be found in the release notes of NetIQ Access Manager version 5.0, available on the Microfocus documentation website.

collector/nvd-index
agent/type
agent/references
agent/severity
agent/weakness
agent/author
agent/description
agent/tags
agent/event
agent/first-publish-date
agent/last-modified-date
agent/softwarecombine
collector/mitre-cve
source/MITRE
vendor/microfocus
canonical/microfocus access manager
version/microfocus access manager/4.5
version/microfocus access manager/4.5-hotfix1
version/microfocus access manager/4.5-sp1
version/microfocus access manager/4.5-sp1_hotfix1
version/microfocus access manager/4.5-sp1_hotfix2
version/microfocus access manager/4.5-sp2
version/microfocus access manager/4.5-sp2_hotfix1
version/microfocus access manager/4.5-sp2_hotfix2
version/microfocus access manager/4.5-sp3
version/microfocus access manager/4.5-sp3_hotfix1
version/microfocus access manager/4.5-sp3_patch3
version/microfocus access manager/4.5-sp4
version/microfocus access manager/4.5-sp5
version/microfocus access manager/5.0
version/microfocus access manager/5.0-sp1