← CVE Radar
CVE-2026-1339Open redirect vulnerability - UCMDB/Operations Bridge Manager
An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.
5.1 MEDIUMEPSS 0.21%Not in KEVNVD: Awaiting Analysis
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.1 | MEDIUM | 4.0OpenText (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N |
| 5.4 | MEDIUM | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
Details
- CVE ID
- CVE-2026-1339
- Status
- Awaiting Analysis
- Assigner (CNA)
- OpenText
- Published
- Nov 5, 2026
- Last modified
- 2026-11-06 20:38 UTC
- Weaknesses
- CWE-601 · URL redirection to untrusted site ('open redirect')
Affected Products
As published by the CNA in the CVE record.
OpenTextUniversal Discovery and CMDB6 version ranges
- 2023.05
- 23.4
- 24.2
- 24.4
- 25.2
- 25.4
OpenTextOperations Bridge Manager6 version ranges
- 2023.05
- 23.4
- 24.2
- 24.4
- 25.2
- 25.4