CVEs published by NCSC

CVEs published by NCSC (CVE Numbering Authority). 10 tracked.

CVE-2026-113697 MEDIUM 4.8 Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows au
CVE-2026-113696 MEDIUM 5.3 Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3
CVE-2026-113695 MEDIUM 4.8 Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Sui
CVE-2026-113694 MEDIUM 5.3 Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3
CVE-2026-113693 MEDIUM 5.3 Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite ve
CVE-2026-113692 MEDIUM 6.9 Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.
CVE-2026-113691 MEDIUM 5.1 Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versio
CVE-2026-113690 MEDIUM 4.8 Stored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite versions 25.3
CVE-2026-113689 MEDIUM 5.1 Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3
CVE-2026-113688 MEDIUM 5.3 Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite ver