Open Redirect in Opentext Operations Bridge Manager
CVE-2026-1339
An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link. Affected systems: This issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.
Vulnerability class: Open Redirect
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Opentext Operations Bridge Manager — versions 2023.05, 23.4, 24.2
- Opentext Universal Discovery And Cmdb — versions 2023.05, 23.4, 24.2
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-1339?
- CVE-2026-1339 is a medium-severity vulnerability in Opentext Operations Bridge Manager, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 5.4/10. Published 2026-11-05.
- How severe is CVE-2026-1339?
- Medium severity. CVSS v3 base score is 5.4 out of 10.