CVE-2026-113697
Reflected Cross-Site Scripting in BMC Helix Operations Management
Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser after that user opens a crafted link.
CVSS 4.0 · 4.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products