Bmc It Service Management Suite

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bmc:bmc_it_service_management_suite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBmc (41db0501-28a3-55f2-9e02-2ebb9bfb3ab9)
ProductBmc It Service Management Suite (93e0874c-1528-5c80-9c2e-22aa1376d15c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-113690 vulnerable 2026-11-03 10:16:28.001750 Stored Cross-Site Scripting in BMC ITSM Attachments
Stored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to execute uploaded script content in other users' browsers.
Published: 2026-10-29T13:03:06.288Z
Updated: 2026-10-29T14:05:55.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113688 vulnerable 2026-11-03 10:16:27.973259 Server-Side Request Forgery in BMC ITSM SmartIT
Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to make server-side requests to internal services and observe response information.
Published: 2026-10-29T13:01:46.475Z
Updated: 2026-10-29T14:06:49.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113694 vulnerable 2026-11-03 10:16:27.960633 Improper Authorization in BMC ITSM SmartIT Attachments
Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to access or modify attachment resources belonging to other users.
Published: 2026-10-29T13:12:52.855Z
Updated: 2026-10-29T13:51:08.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113691 vulnerable 2026-11-03 10:16:27.518045 Stored Cross-Site Scripting in BMC ITSM Knowledge Articles
Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to execute stored scripts in other users' browsers.
Published: 2026-10-29T13:07:03.816Z
Updated: 2026-10-29T14:03:20.544Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113689 vulnerable 2026-11-03 10:16:27.501117 Stored Cross-Site Scripting in BMC ITSM Work Notes
Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to execute stored scripts in other users' browsers.
Published: 2026-10-29T13:02:34.909Z
Updated: 2026-10-29T14:06:24.850Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113695 vulnerable 2026-11-03 10:16:27.466580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113693 vulnerable 2026-11-03 10:16:27.366480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113692 vulnerable 2026-11-03 10:16:27.191006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-113696 vulnerable 2026-11-03 10:16:27.123206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.