Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-113697 EUVD-2026-112829GHSA-rjj7-pvph-hfm6

Reflected Cross-Site Scripting in BMC Helix Operations Management

Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by NCSC

Description

Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser after that user opens a crafted link.

Affected products

VendorProductAffectedFixed
BMC BMC Helix Operations Management 25.4.00 —

References