{"id":"CVE-2026-1339","published":"2026-11-05T20:17:55.600","lastModified":"2026-11-05T21:18:46.427","description":"An Open Redirect vulnerability has been identified in OpenText™ Universal Discovery and CMDB. The vulnerability can be exploited only if an attacker sends a specially crafted URL containing a link to a malicious resource and a user subsequently follows that link.\nAffected systems:\n\nThis issue affects only the classic deployment options for UCMDB UI (ucmdb-browser) component within Universal Discovery and CMDB and Operations Bridge Manager. Containerized deployment options are not affected.","cvssScore":5.4,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cwes":["CWE-601"],"vendors":[],"products":[],"references":[{"url":"https://my.opentext.com/support/article/open-redirect-vulnerability-reported-by-orange-obm/2292100","tags":[]},{"url":"https://my.opentext.com/support/article/open-redirect-vulnerability-ucmdb/2266764","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}