CVE-2026-1339Open redirect vulnerability - UCMDB/Operations Bridge Manager

Description

An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://my.opentext.com/support/article/open-redirect-vulnerability-ucmdb/2266764
• https://my.opentext.com/support/article/open-redirect-vulnerability-reported-by-orange-obm/2292100