Open Redirect Vulnerability in OpenText Universal Discovery and CMDB
CVE-2026-1339

5.1MEDIUM

Key Information:

Vendor

Opentext
Status
Universal Discovery And Cmdb
Operations Bridge Manager
Vendor
CVE Published:
5 November 2026

What is CVE-2026-1339?

An Open Redirect vulnerability has been discovered in the classic deployment versions of OpenText's Universal Discovery and Configuration Management Database (CMDB). This vulnerability enables attackers to create specially crafted URLs that, when followed by users, redirect them to malicious resources. It is important to note that this issue specifically impacts the ucmdb-browser component and does not affect containerized deployment options. Users and administrators are advised to evaluate their systems for potential exposure and to implement necessary security measures immediately.

Affected Version(s)

Operations Bridge Manager Windows 2023.05

Operations Bridge Manager Windows 23.4

Operations Bridge Manager Windows 24.2

References

https://my.opentext.com/support/article/open-redirect-vul...
https://my.opentext.com/support/article/open-redirect-vul...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.