CVE-2026-113695 Reflected Cross-Site Scripting in BMC ITSM SmartIT

Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to inject script content into HTML responses viewed by another user...

CVE-2026-113695

Reflected cross-site scripting (XSS) exists in the SmartIT inline-image attachment feature of the BMC IT Service Management Suite (versions 25.3.01, 25.4.01, and 26.1.01). This vulnerability allows authenticated users to inject malicious script content into HTML responses viewed by other users. N...