Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to inject HTML (such as an SSRF payload) into the Activity Log by placing it in the To: field. This affects rendering that occurs upon a click in the "number of recipients" field. NOTE: the vendor's position is that "no real impact is demonstrated."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BMC Software BMC Remedy 跨站脚本漏洞
Vulnerability Description
BMC Software BMC Remedy是美国BMC Software公司的一个应用软件。提供了现成的IT信息库（ITIL）服务支持功能。 BMC Software BMC Remedy 22.1之前版本存在安全漏洞，该漏洞源于基于电子邮件的事件转发允许远程经过身份验证的用户通过将HTML（例如SSRF有效载荷）放在收件人字段中来注入活动日志，这会影响点击收件人数量字段时发生的渲染。
CVSS Information
N/A
Vulnerability Type
N/A