Vulnerability Description
Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser after that user opens a crafted link.
Related Weaknesses (CWE)
References
- https://docs.helixops.ai/bin/IT-Operations-Management/On-Premises-Deployment/BMC
- https://docs.helixops.ai/bin/IT-Operations-Management/On-Premises-Deployment/BMC
- https://docs.helixops.ai/bin/IT-Operations-Management/On-Premises-Deployment/BMC
- https://github.com/NCSC-Assess/Advisories/blob/main/advisories/2026/CVE-2026-113
FAQ
What is CVE-2026-113697?
CVE-2026-113697 is a documented vulnerability. Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser after that user opens a ...
How severe is CVE-2026-113697?
CVSS scoring is not yet available for CVE-2026-113697. Check NVD for updates.
Is there a patch for CVE-2026-113697?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.