{"schema_version":1,"title":"Bmc IT Service Management Suite vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in Bmc IT Service Management Suite: 0 in the last 7 days and 8 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-113696, was published on 29 October 2026. 8 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/bmc-it-service-management-suite","json_url":"https://junglewise.ai/threats/technologies/bmc-it-service-management-suite.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/bmc-it-service-management-suite","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":8,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":8,"last_90_days":8,"last_365_days":8},"latest":[{"cve":"CVE-2026-113696","slug":"cve-2026-113696-improper-authorization-in-the-smartit-change-approval-feature-of","title":"BMC IT Service Management Suite authorization bypass in SmartIT change approval","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:45.233+00:00","url":"https://junglewise.ai/threats/cve-2026-113696-improper-authorization-in-the-smartit-change-approval-feature-of"},{"cve":"CVE-2026-113695","slug":"cve-2026-113695-reflected-cross-site-scripting-in-the-smartit-inline-image","title":"BMC IT Service Management Suite reflected XSS in inline-image attachment","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:45.06+00:00","url":"https://junglewise.ai/threats/cve-2026-113695-reflected-cross-site-scripting-in-the-smartit-inline-image"},{"cve":"CVE-2026-113694","slug":"cve-2026-113694-improper-authorization-in-the-smartit-user-attachment-feature-of","title":"BMC IT Service Management Suite improper authorization in SmartIT","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:44.913+00:00","url":"https://junglewise.ai/threats/cve-2026-113694-improper-authorization-in-the-smartit-user-attachment-feature-of"},{"cve":"CVE-2026-113693","slug":"cve-2026-113693-exposure-of-sensitive-information-in-the-smartit-system-account","title":"BMC IT Service Management Suite information disclosure in SmartIT","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:44.77+00:00","url":"https://junglewise.ai/threats/cve-2026-113693-exposure-of-sensitive-information-in-the-smartit-system-account"},{"cve":"CVE-2026-113692","slug":"cve-2026-113692-path-traversal-in-the-smartit-file-management-feature-of-bmc-it","title":"BMC IT Service Management Suite path traversal in SmartIT file-management","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:44.623+00:00","url":"https://junglewise.ai/threats/cve-2026-113692-path-traversal-in-the-smartit-file-management-feature-of-bmc-it"},{"cve":"CVE-2026-113691","slug":"cve-2026-113691-stored-cross-site-scripting-in-the-smartit-knowledge-article","title":"BMC IT Service Management Suite stored XSS in SmartIT knowledge article","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:44.473+00:00","url":"https://junglewise.ai/threats/cve-2026-113691-stored-cross-site-scripting-in-the-smartit-knowledge-article"},{"cve":"CVE-2026-113690","slug":"cve-2026-113690-stored-cross-site-scripting-in-the-smartit-attachment-feature-of","title":"BMC IT Service Management Suite stored XSS in attachment feature","severity":"info","exploited":false,"published_at":"2026-10-29T13:17:04.633+00:00","url":"https://junglewise.ai/threats/cve-2026-113690-stored-cross-site-scripting-in-the-smartit-attachment-feature-of"},{"cve":"CVE-2026-113688","slug":"cve-2026-113688-server-side-request-forgery-in-the-smartit-url-based-attachment","title":"BMC IT Service Management Suite SSRF in URL-based attachment feature","severity":"info","exploited":false,"published_at":"2026-10-29T13:17:04.37+00:00","url":"https://junglewise.ai/threats/cve-2026-113688-server-side-request-forgery-in-the-smartit-url-based-attachment"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Bmc Footprints","slug":"footprints","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/footprints"},{"name":"Bmc FootPrints ITSM","slug":"footprints-itsm","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/footprints-itsm"},{"name":"Bmc Control-M\\","slug":"control-m","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/control-m"},{"name":"Bmc Managed File Transfer","slug":"managed-file-transfer","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/managed-file-transfer"}],"technology":{"hub":true,"name":"Bmc IT Service Management Suite","slug":"bmc-it-service-management-suite","vendor":{"hub":true,"name":"Bmc","slug":"bmc","url":"https://junglewise.ai/threats/vendors/bmc"},"aliases":[],"category":"service","url":"https://junglewise.ai/threats/technologies/bmc-it-service-management-suite"},"most_severe":[{"cve":"CVE-2026-113696","slug":"cve-2026-113696-improper-authorization-in-the-smartit-change-approval-feature-of","title":"BMC IT Service Management Suite authorization bypass in SmartIT change approval","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:45.233+00:00","url":"https://junglewise.ai/threats/cve-2026-113696-improper-authorization-in-the-smartit-change-approval-feature-of"},{"cve":"CVE-2026-113695","slug":"cve-2026-113695-reflected-cross-site-scripting-in-the-smartit-inline-image","title":"BMC IT Service Management Suite reflected XSS in inline-image attachment","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:45.06+00:00","url":"https://junglewise.ai/threats/cve-2026-113695-reflected-cross-site-scripting-in-the-smartit-inline-image"},{"cve":"CVE-2026-113694","slug":"cve-2026-113694-improper-authorization-in-the-smartit-user-attachment-feature-of","title":"BMC IT Service Management Suite improper authorization in SmartIT","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:44.913+00:00","url":"https://junglewise.ai/threats/cve-2026-113694-improper-authorization-in-the-smartit-user-attachment-feature-of"},{"cve":"CVE-2026-113693","slug":"cve-2026-113693-exposure-of-sensitive-information-in-the-smartit-system-account","title":"BMC IT Service Management Suite information disclosure in SmartIT","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:44.77+00:00","url":"https://junglewise.ai/threats/cve-2026-113693-exposure-of-sensitive-information-in-the-smartit-system-account"},{"cve":"CVE-2026-113692","slug":"cve-2026-113692-path-traversal-in-the-smartit-file-management-feature-of-bmc-it","title":"BMC IT Service Management Suite path traversal in SmartIT file-management","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:44.623+00:00","url":"https://junglewise.ai/threats/cve-2026-113692-path-traversal-in-the-smartit-file-management-feature-of-bmc-it"},{"cve":"CVE-2026-113691","slug":"cve-2026-113691-stored-cross-site-scripting-in-the-smartit-knowledge-article","title":"BMC IT Service Management Suite stored XSS in SmartIT knowledge article","severity":"info","exploited":false,"published_at":"2026-10-29T14:17:44.473+00:00","url":"https://junglewise.ai/threats/cve-2026-113691-stored-cross-site-scripting-in-the-smartit-knowledge-article"},{"cve":"CVE-2026-113690","slug":"cve-2026-113690-stored-cross-site-scripting-in-the-smartit-attachment-feature-of","title":"BMC IT Service Management Suite stored XSS in attachment feature","severity":"info","exploited":false,"published_at":"2026-10-29T13:17:04.633+00:00","url":"https://junglewise.ai/threats/cve-2026-113690-stored-cross-site-scripting-in-the-smartit-attachment-feature-of"},{"cve":"CVE-2026-113688","slug":"cve-2026-113688-server-side-request-forgery-in-the-smartit-url-based-attachment","title":"BMC IT Service Management Suite SSRF in URL-based attachment feature","severity":"info","exploited":false,"published_at":"2026-10-29T13:17:04.37+00:00","url":"https://junglewise.ai/threats/cve-2026-113688-server-side-request-forgery-in-the-smartit-url-based-attachment"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}