Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

BMC vulnerabilities

34 published CVEs name BMC among the affected products.

Published CVEs
34
Last 12 months
14
Critical
6
Known exploited
0

Critical 6High 5Medium 22Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20223
  2. 20245
  3. 202512
  4. 202614

Newest CVEs

  • CVE-2026-113697

    Reflected Cross-Site Scripting in BMC Helix Operations Management

    BMC · BMC Helix Operations Management

    Medium4.8
  • CVE-2026-113696

    Improper Authorization in BMC ITSM SmartIT Change Approvals

    BMC · BMC IT Service Management Suite

    Medium5.3
  • CVE-2026-113695

    Reflected Cross-Site Scripting in BMC ITSM SmartIT

    BMC · BMC IT Service Management Suite

    Medium4.8
  • CVE-2026-113694

    Improper Authorization in BMC ITSM SmartIT Attachments

    BMC · BMC IT Service Management Suite

    Medium5.3
  • CVE-2026-113693

    System Account Credential Disclosure in BMC ITSM

    BMC · BMC IT Service Management Suite

    Medium5.3
  • CVE-2026-113692

    Path Traversal in BMC ITSM

    BMC · BMC IT Service Management Suite

    Medium6.9
  • CVE-2026-113691

    Stored Cross-Site Scripting in BMC ITSM Knowledge Articles

    BMC · BMC IT Service Management Suite

    Medium5.1
  • CVE-2026-113690

    Stored Cross-Site Scripting in BMC ITSM Attachments

    BMC · BMC IT Service Management Suite

    Medium4.8
  • CVE-2026-113689

    Stored Cross-Site Scripting in BMC ITSM Work Notes

    BMC · BMC IT Service Management Suite

    Medium5.1
  • CVE-2026-113688

    Server-Side Request Forgery in BMC ITSM SmartIT

    BMC · BMC IT Service Management Suite

    Medium5.3