What’s Vulnerable › Vulnerabilities

CVE-2022-26323: Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product.

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-17 · updated 2026-06-17
• Weakness: CWE-648

Description

Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and Containerized) allows Privilege Escalation.  The vulnerability could allow authenticated attackers to elevate user privileges. This issue affects Operations Bridge Manager: through 2021.05; Operations Bridge Suite (Containerized): through 2021.05; UCMDB ( Classic and Containerized): through 2021.05.

Affected products

• OpenText™ Operations Bridge Manager: through 2021.05
• OpenText™ Operations Bridge Suite (Containerized): through 2021.05
• OpenText™ UCMDB ( Classic and Containerized): through 2021.05

References

• https://portal.microfocus.com/s/article/KM000039040?language=en_US
• https://portal.microfocus.com/s/article/KM000039044?language=en_US

Get alerted when CVE-2022-26323 or the next vulnerability affects your stack