Vulnerability · Published Nov 5, 2026 · Assigned by OpenText
CVE-2026-1339Open redirect vulnerability - UCMDB/Operations Bridge Manager
Medium 5.4
In plain English
A medium-severity open redirect in Operations Bridge Manager from OpenText. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Official description
An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenText | Universal Discovery and CMDB | 2023.0523.424.224.425.225.4 |
| OpenText | Operations Bridge Manager | 2023.0523.424.224.425.225.4 |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N