# Bmc IT Service Management Suite vulnerabilities Source: https://junglewise.ai/threats/technologies/bmc-it-service-management-suite Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/bmc-it-service-management-suite.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 8 vulnerabilities in Bmc IT Service Management Suite: 0 in the last 7 days and 8 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-113696, was published on 29 October 2026. 8 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 8 - Last 90 days: 8 - All time: 8 (0 critical, 0 exploited in the wild) ## Latest Bmc IT Service Management Suite vulnerabilities - [CVE-2026-113696: BMC IT Service Management Suite authorization bypass in SmartIT change approval](https://junglewise.ai/threats/cve-2026-113696-improper-authorization-in-the-smartit-change-approval-feature-of) (info, published 29 Oct 2026) - [CVE-2026-113695: BMC IT Service Management Suite reflected XSS in inline-image attachment](https://junglewise.ai/threats/cve-2026-113695-reflected-cross-site-scripting-in-the-smartit-inline-image) (info, published 29 Oct 2026) - [CVE-2026-113694: BMC IT Service Management Suite improper authorization in SmartIT](https://junglewise.ai/threats/cve-2026-113694-improper-authorization-in-the-smartit-user-attachment-feature-of) (info, published 29 Oct 2026) - [CVE-2026-113693: BMC IT Service Management Suite information disclosure in SmartIT](https://junglewise.ai/threats/cve-2026-113693-exposure-of-sensitive-information-in-the-smartit-system-account) (info, published 29 Oct 2026) - [CVE-2026-113692: BMC IT Service Management Suite path traversal in SmartIT file-management](https://junglewise.ai/threats/cve-2026-113692-path-traversal-in-the-smartit-file-management-feature-of-bmc-it) (info, published 29 Oct 2026) - [CVE-2026-113691: BMC IT Service Management Suite stored XSS in SmartIT knowledge article](https://junglewise.ai/threats/cve-2026-113691-stored-cross-site-scripting-in-the-smartit-knowledge-article) (info, published 29 Oct 2026) - [CVE-2026-113690: BMC IT Service Management Suite stored XSS in attachment feature](https://junglewise.ai/threats/cve-2026-113690-stored-cross-site-scripting-in-the-smartit-attachment-feature-of) (info, published 29 Oct 2026) - [CVE-2026-113688: BMC IT Service Management Suite SSRF in URL-based attachment feature](https://junglewise.ai/threats/cve-2026-113688-server-side-request-forgery-in-the-smartit-url-based-attachment) (info, published 29 Oct 2026) ## Most severe Bmc IT Service Management Suite vulnerabilities - [CVE-2026-113696: BMC IT Service Management Suite authorization bypass in SmartIT change approval](https://junglewise.ai/threats/cve-2026-113696-improper-authorization-in-the-smartit-change-approval-feature-of) (info, published 29 Oct 2026) - [CVE-2026-113695: BMC IT Service Management Suite reflected XSS in inline-image attachment](https://junglewise.ai/threats/cve-2026-113695-reflected-cross-site-scripting-in-the-smartit-inline-image) (info, published 29 Oct 2026) - [CVE-2026-113694: BMC IT Service Management Suite improper authorization in SmartIT](https://junglewise.ai/threats/cve-2026-113694-improper-authorization-in-the-smartit-user-attachment-feature-of) (info, published 29 Oct 2026) - [CVE-2026-113693: BMC IT Service Management Suite information disclosure in SmartIT](https://junglewise.ai/threats/cve-2026-113693-exposure-of-sensitive-information-in-the-smartit-system-account) (info, published 29 Oct 2026) - [CVE-2026-113692: BMC IT Service Management Suite path traversal in SmartIT file-management](https://junglewise.ai/threats/cve-2026-113692-path-traversal-in-the-smartit-file-management-feature-of-bmc-it) (info, published 29 Oct 2026) - [CVE-2026-113691: BMC IT Service Management Suite stored XSS in SmartIT knowledge article](https://junglewise.ai/threats/cve-2026-113691-stored-cross-site-scripting-in-the-smartit-knowledge-article) (info, published 29 Oct 2026) - [CVE-2026-113690: BMC IT Service Management Suite stored XSS in attachment feature](https://junglewise.ai/threats/cve-2026-113690-stored-cross-site-scripting-in-the-smartit-attachment-feature-of) (info, published 29 Oct 2026) - [CVE-2026-113688: BMC IT Service Management Suite SSRF in URL-based attachment feature](https://junglewise.ai/threats/cve-2026-113688-server-side-request-forgery-in-the-smartit-url-based-attachment) (info, published 29 Oct 2026) ## Vulnerabilities per week 8 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 8 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Bmc technologies - [Bmc Footprints](https://junglewise.ai/threats/technologies/footprints): 4 vulnerabilities - [Bmc FootPrints ITSM](https://junglewise.ai/threats/technologies/footprints-itsm): 4 vulnerabilities - [Bmc Control-M\](https://junglewise.ai/threats/technologies/control-m): 3 vulnerabilities - [Bmc Managed File Transfer](https://junglewise.ai/threats/technologies/managed-file-transfer): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Bmc IT Service Management Suite vulnerabilities", https://junglewise.ai/threats/technologies/bmc-it-service-management-suite, 9 November 2026.