[ Vendor · 11 CVEs ]
BMC
CVEs affecting BMC published in the last 30 days, plus any BMC CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113695 | 29 Oct 2026 | CVSS 4.8 | BMC IT Service Management SuiteReflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and… | |
| CVE-2026-113696 | 29 Oct 2026 | CVSS 5.3 | BMC IT Service Management SuiteImproper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows… | |
| CVE-2026-113697 | 29 Oct 2026 | CVSS 4.8 | BMC Helix Operations ManagementReflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script… | |
| CVE-2026-113691 | 29 Oct 2026 | CVSS 5.1 | BMC IT Service Management SuiteStored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows… | |
| CVE-2026-113692 | 29 Oct 2026 | CVSS 6.9 | BMC IT Service Management SuitePath traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated… | |
| CVE-2026-113693 | 29 Oct 2026 | CVSS 5.3 | BMC IT Service Management SuiteExposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01… | |
| CVE-2026-113694 | 29 Oct 2026 | CVSS 5.3 | BMC IT Service Management SuiteImproper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows… | |
| CVE-2026-113688 | 29 Oct 2026 | CVSS 5.3 | BMC IT Service Management SuiteServer-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01… | |
| CVE-2026-113689 | 29 Oct 2026 | CVSS 5.1 | BMC IT Service Management SuiteStored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows… | |
| CVE-2026-113690 | 29 Oct 2026 | CVSS 4.8 | BMC IT Service Management SuiteStored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows… | |
| CVE-2026-10537 | 27 Oct 2026 | CVSS 5.3 | BMC Control-M/Enterprise ManagerA misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to… |