Stored XSS in BMC IT Service Management Suite

Executive Summary

This is a stored cross-site scripting (XSS) vulnerability in BMC IT Service Management Suite's SmartIT knowledge-article feature. It allows authenticated users to inject malicious scripts into knowledge articles. When other users view these articles, the scripts execute in their browsers.

Useful 0 Not Useful 0

Detection Guidance

Detecting this stored XSS vulnerability requires checking for malicious scripts in knowledge articles within BMC IT Service Management Suite. Review article content for unusual scripts or payloads like <script> tags. Monitor browser console logs for unexpected script executions when viewing articles. Check for unauthorized modifications to knowledge articles by authenticated users.

Useful 0 Not Useful 0

Impact Analysis

An attacker could steal session cookies, redirect users to malicious sites, or perform actions on behalf of users. This could lead to unauthorized access to sensitive data or account takeover if users interact with the compromised articles.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest hotfixes from BMC: version 25.3.01 hotfix 10, 25.4.01 hotfix 22, or 26.1.01 hotfix 12. Restrict write access to knowledge articles to trusted users only. Implement input validation and output encoding for article content. Monitor for suspicious activity in article modifications and user sessions.

Useful 0 Not Useful 0