CVE-2026-1339

Description

An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.

References

https://my.opentext.com/support/article/open-redirect-vulnerability-ucmdb/2266764

https://my.opentext.com/support/article/open-redirect-vulnerability-reported-by-orange-obm/2292100

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117736

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS