CVE-2026-113690 | BMC IT Service Management Suite up to 25.3.01/25.4.01/26.1.01 Attachment Feature cross site scripting

October 29, 2026 Yanac

A vulnerability was found in BMC IT Service Management Suite up to 25.3.01/25.4.01/26.1.01. It has been declared as problematic. This affects an unknown function of the component Attachment Feature. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-113690. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More