Advisories · Technology
BMC IT Service Management Suite.
Every CVE that names BMC IT Service Management Suite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Improper Authorization in BMC ITSM SmartIT Change Approvals
- BMC IT Service Management Suite
- Broken access control
- CVSS 4.8 Medium
Reflected Cross-Site Scripting in BMC ITSM SmartIT
- BMC IT Service Management Suite
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Improper Authorization in BMC ITSM SmartIT Attachments
- BMC IT Service Management Suite
- Broken access control
- CVSS 5.3 Medium
System Account Credential Disclosure in BMC ITSM
- BMC IT Service Management Suite
- Information disclosure
- CVSS 6.9 Medium
Path Traversal in BMC ITSM
- BMC IT Service Management Suite
- Path traversal
- CVSS 5.1 Medium
Stored Cross-Site Scripting in BMC ITSM Knowledge Articles
- BMC IT Service Management Suite
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Stored Cross-Site Scripting in BMC ITSM Attachments
- BMC IT Service Management Suite
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Stored Cross-Site Scripting in BMC ITSM Work Notes
- BMC IT Service Management Suite
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Server-Side Request Forgery in BMC ITSM SmartIT
- BMC IT Service Management Suite
- Server-side request forgery (SSRF)