Riskcovery

CVE-2022-26323

Incorrect Use of Privileged vulnerability has been discovered on OpenText™ UCMDB and Operation Bridge Manager product.

State
Published
Severity
8.7 High
Published
Apr 17, 2025
Updated
Apr 17, 2025
Reserved
Feb 28, 2022

Read the record on cve.org

Description

Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), OpenText™ UCMDB ( Classic and Containerized) allows Privilege Escalation.

The vulnerability could allow authenticated attackers to elevate user privileges. This issue affects Operations Bridge Manager: through 2021.05; Operations Bridge Suite (Containerized): through 2021.05; UCMDB ( Classic and Containerized): through 2021.05.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:N/R:U/V:C/RE:M/U:AmberOpenText

Weaknesses

  • CWE-648 Incorrect Use of Privileged APIs

Affected Products

ProductVersions
Operations Bridge ManagerOpenText™
  • 2021.05 and earlierAffected
Operations Bridge Suite (Containerized)OpenText™
  • 2021.05 and earlierAffected
UCMDB ( Classic and Containerized)OpenText™
  • 2021.05 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.