CVE-2026-1339— Open redirect vulnerability - UCMDB/Operations Bridge Manager

Quick assessment

Affected

OpenText Universal Discovery and CMDB

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 OpenText™ Universal Discovery 和 CMDB 中发现了一个开放重定向漏洞。该漏洞仅在攻击者发送包含指向恶意资源的特制 URL，且用户随后点击该链接时才能被利用。受影响系统：此问题仅影响 Universal Discovery 和 CMDB 以及 Operations Bridge Manager 中 UCMDB UI（ucmdb-browser）组件的经典部署选项。容器化部署选项不受影响。

CVSS 5.1 · Medium Updated Nov 06, 2026

Possible ATT&CK Techniques 2 AI

T1566.001 · Spearphishing Attachment T1566 · Phishing

Affected Version Matrix 14

Vendor	Product	Version Range	Status
OpenText	Operations Bridge Manager	`2023.05`	affected
		`23.4`	affected
		`24.2`	affected
		`24.4`	affected
		`25.2`	affected
		`25.4`	affected
		`26.2`	unaffected
OpenText	Universal Discovery and CMDB	`2023.05`	affected
		`23.4`	affected
		`24.2`	affected
		`24.4`	affected
		`25.2`	affected
		`25.4`	affected
		`26.2`	unaffected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Open redirect vulnerability - UCMDB/Operations Bridge Manager

Source: CVE Program / CVE List V5

Vulnerability Description

An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

指向未可信站点的URL重定向(开放重定向)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
OpenText	Universal Discovery and CMDB	2023.05	-
OpenText	Operations Bridge Manager	2023.05	-

II. Public POCs for CVE-2026-1339

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-1339

请登录查看更多情报信息。

Other References for CVE-2026-1339 (2)

https://www.cve.org/CVERecord?id=CVE-2026-1339

Same Patch Batch · OpenText · 2026-11-05 · 4 CVEs total

CVE-2026-19134	7.1 HIGH	OpenText OTDS 22.1-26.2 黑盒逆向工程漏洞
CVE-2026-76580	6.3 MEDIUM	OpenText OTDS 25.1-26.2 跨站脚本漏洞
CVE-2026-18159	5.3 MEDIUM	OpenText OTDS 10.5-26.2 点击劫持漏洞

IV. Related Vulnerabilities

Same vendor: OpenText

Same weakness: CWE-601