{"id":"CVE-2026-1339","title":"Open redirect vulnerability - UCMDB/Operations Bridge Manager","summary":"An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subse…","severity":"medium","cvss":5.1,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-601"],"vendor":"OpenText","product":"Universal Discovery and CMDB","affected":["universal_discovery_and_cmdb 2023.05","universal_discovery_and_cmdb 23.4","universal_discovery_and_cmdb 24.2","universal_discovery_and_cmdb 24.4","universal_discovery_and_cmdb 25.2","universal_discovery_and_cmdb 25.4","operations_bridge_manager 2023.05","operations_bridge_manager 23.4","operations_bridge_manager 24.2","operations_bridge_manager 24.4","operations_bridge_manager 25.2","operations_bridge_manager 25.4"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:43:50.525712Z"},"published":"2026-11-05","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:43:55.313Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-1339","references":[{"url":"https://my.opentext.com/support/article/open-redirect-vulnerability-ucmdb/2266764"},{"url":"https://my.opentext.com/support/article/open-redirect-vulnerability-reported-by-orange-obm/2292100"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T22:38:31.876Z","epss":0.00211,"epssPercentile":0.11373,"slug":"CVE-2026-1339","body":"## Overview\n\nAn Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link.\nAffected systems:\n\nThis issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.\n\n## Affected\n\n- `universal_discovery_and_cmdb 2023.05`\n- `universal_discovery_and_cmdb 23.4`\n- `universal_discovery_and_cmdb 24.2`\n- `universal_discovery_and_cmdb 24.4`\n- `universal_discovery_and_cmdb 25.2`\n- `universal_discovery_and_cmdb 25.4`\n- `operations_bridge_manager 2023.05`\n- `operations_bridge_manager 23.4`\n- `operations_bridge_manager 24.2`\n- `operations_bridge_manager 24.4`\n- `operations_bridge_manager 25.2`\n- `operations_bridge_manager 25.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":28.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}