What’s Vulnerable › Products

User Access Manager vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your User Access Manager version is affected

Latest User Access Manager vulnerabilities

• CVE-2026-18035 — User Access Manager < 2.3.15 - Unauthenticated Restricted Content Disclosure via REST API (CVSS 5.3)
• CVE-2022-1601 — User Access Manager < 2.2.18 - IP Spoofing (CVSS 5.3)