helix_operations_management vulnerabilities

CVEs whose affected-version data names the helix_operations_management package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113697Medium· 4.8

1w ago

Reflected Cross-Site Scripting in BMC Helix Operations Management

Reflected cross-site scripting in the agent query feature of BMC Helix Operations Management 25.4.00 allows authenticated attackers to execute script in another user's browser after that user opens a crafted link.

▾ SunlitBMC · BMC Helix Operations ManagementEPSS 0.43%via CVEORG