---
id: CVE-2026-1339
title: Open redirect vulnerability - UCMDB/Operations Bridge Manager
summary: >-
  An Open Redirect vulnerability has been identified in OpenText™ Universal
  Discovery and CMDB. The vulnerability can be exploited only if an attacker
  sends a specially crafted URL containing a link to a malicious resource and a
  user subse…
severity: medium
cvss: 5.1
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-601
vendor: OpenText
product: Universal Discovery and CMDB
affected:
  - universal_discovery_and_cmdb 2023.05
  - universal_discovery_and_cmdb 23.4
  - universal_discovery_and_cmdb 24.2
  - universal_discovery_and_cmdb 24.4
  - universal_discovery_and_cmdb 25.2
  - universal_discovery_and_cmdb 25.4
  - operations_bridge_manager 2023.05
  - operations_bridge_manager 23.4
  - operations_bridge_manager 24.2
  - operations_bridge_manager 24.4
  - operations_bridge_manager 25.2
  - operations_bridge_manager 25.4
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:43:50.525712Z'
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:43:55.313Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-1339'
references:
  - url: >-
      https://my.opentext.com/support/article/open-redirect-vulnerability-ucmdb/2266764
  - url: >-
      https://my.opentext.com/support/article/open-redirect-vulnerability-reported-by-orange-obm/2292100
tags:
  - cve.org
ingestedAt: '2026-11-05T22:38:31.876Z'
epss: 0.00211
epssPercentile: 0.11373
---

## Overview

An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link.
Affected systems:

This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.

## Affected

- `universal_discovery_and_cmdb 2023.05`
- `universal_discovery_and_cmdb 23.4`
- `universal_discovery_and_cmdb 24.2`
- `universal_discovery_and_cmdb 24.4`
- `universal_discovery_and_cmdb 25.2`
- `universal_discovery_and_cmdb 25.4`
- `operations_bridge_manager 2023.05`
- `operations_bridge_manager 23.4`
- `operations_bridge_manager 24.2`
- `operations_bridge_manager 24.4`
- `operations_bridge_manager 25.2`
- `operations_bridge_manager 25.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.