BI
Product
BMC IT Service Management Suite
by BMC · last CVE Oct 29, 2026
9
CVEs
0
On KEV
6.9
Max CVSS
9
New 30D
Severity mix
Critical 0High 0Medium 9Low 0
Watch

Add BMC IT Service Management Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-113692
New
6.9–Oct 29
Path Traversal in BMC ITSM
Affected: 25.3.01; 25.4.01; 26.1.01
CVE-2026-113696
New
5.3–Oct 29
Improper Authorization in BMC ITSM SmartIT Change Approvals
Affected: 25.3.01; 25.4.01; 26.1.01
CVE-2026-113694
New
5.3–Oct 29
Improper Authorization in BMC ITSM SmartIT Attachments
Affected: 25.3.01; 25.4.01; 26.1.01
CVE-2026-113693
New
5.3–Oct 29
System Account Credential Disclosure in BMC ITSM
Affected: 25.3.01; 25.4.01; 26.1.01
CVE-2026-113688
New
5.3–Oct 29
Server-Side Request Forgery in BMC ITSM SmartIT
Affected: 25.3.01; 25.4.01; 26.1.01
CVE-2026-113691
New
5.1–Oct 29
Stored Cross-Site Scripting in BMC ITSM Knowledge Articles
Affected: 25.3.01; 25.4.01; 26.1.01
CVE-2026-113689
New
5.1–Oct 29
Stored Cross-Site Scripting in BMC ITSM Work Notes
Affected: 25.3.01; 25.4.01; 26.1.01
CVE-2026-113695
New
4.8–Oct 29
Reflected Cross-Site Scripting in BMC ITSM SmartIT
Affected: 25.3.01; 25.4.01; 26.1.01
CVE-2026-113690
New
4.8–Oct 29
Stored Cross-Site Scripting in BMC ITSM Attachments
Affected: 25.3.01; 25.4.01; 26.1.01
Showing 9