Reflected XSS in BMC IT Service Management Suite

Executive Summary

This is a reflected cross-site scripting (XSS) vulnerability in BMC IT Service Management Suite's SmartIT inline-image attachment feature. It allows authenticated users to inject malicious scripts into HTML responses viewed by other users. The flaw affects versions 25.3.01, 25.4.01, and 26.1.01.

Useful 0 Not Useful 0

Detection Guidance

To detect this reflected XSS vulnerability, monitor web application logs for unusual inline-image attachment requests containing script tags or suspicious input. Check for HTML responses with unfiltered user-supplied data in SmartIT features. Use tools like Burp Suite or OWASP ZAP to intercept and inspect requests for malicious payloads in attachment parameters.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to execute malicious scripts in the context of another user's session, potentially stealing session cookies, credentials, or sensitive data. It requires an authenticated user to introduce malicious content and another user to trigger the affected request.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the available hotfixes for your version (10 for 25.3.01, 22 for 25.4.01, or 12 for 26.1.01). If hotfixes are unavailable, disable the inline-image attachment feature in SmartIT. Implement input validation and output encoding for all user-supplied data in HTML responses.

Useful 0 Not Useful 0