CVE-2026-1339 Open redirect vulnerability - UCMDB/Operations Bridge Manager

Description

An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.

Exploitable remotely over the network, without an account and if a user takes an action; the impact on data or service is limited.

Attack vector

Network

Attack complexity

Low

Attack requirements

None

Privileges required

None

Interaction

Active

Confidentiality

Low

Integrity

Low

Availability

None

Confidentiality of other systems

None

Integrity of other systems

None

Availability of other systems

None

Affected products and versions