CVE-2026-11877

High

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager…

[email protected]·CWE-648·Published 2026-06-24

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

153 chars

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

NVDen

153 chars

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

Un usuario no autorizado puede modificar la configuración a través de llamadas a la API que afecta al OpenText Access Manager. Este problema afecta a Access Manager anterior a la versión 5.1.3.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
4.0	Primary	cve.org	6.3	—	—	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N
4.0	Secondary	ENISA EUVD	6.3	—	—	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N
4.0	Secondary	NVD	6.3	—	—	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X