CVE-2026-113689

Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to execute stored scripts in other users' browsers...

CVE-2026-113689

The BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 are vulnerable to a stored cross-site scripting (XSS) flaw within the SmartIT work-notes feature. This vulnerability allows authenticated users to inject and execute malicious scripts in the browsers of other users. No spe...

EUVD-2026-112805

Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to execute stored scripts in other users' browsers...

CVE-2026-113689 Stored Cross-Site Scripting in BMC ITSM Work Notes

Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to execute stored scripts in other users' browsers...