Stored Cross-Site Scripting in BMC IT Service Management Suite

CVE-2026-113691

What is CVE-2026-113691?

A stored cross-site scripting vulnerability exists within the SmartIT knowledge-article feature of the BMC IT Service Management Suite. This flaw enables authenticated users to inject and execute malicious scripts in the browsers of other users, compromising the security of user sessions and allowing unauthorized access to sensitive information.

References