8.2
High
CVE-2026-11878 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access…
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText Access Manager allows Cross-Site Scripting (XSS). This issue affects Access Manager: from 5.1 through 5.1.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Access Manager 5.1 | 5.1 → 5.1.2 | No fix stated |