{"uuid": "7b9f7f22-25c8-468b-857d-54d9053f3b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26088", "type": "seen", "source": "https://t.me/hacking_Attack/76667", "content": "Exploit Collector\nBMC Remedy ITSM-Suite 9.1.10 / 20.02 HTML Injection\n\nhttps://4.bp.blogspot.com/-zX4owX_f6gA/WWlvEjBsFTI/AAAAAAAAILA/L-jpFLkKi_AyIykovxrESAdO3HPxIIp7QCLcBGAs/s1600/h132.png \nBMC Remedy ITSM-Suite version 9.1.10 (20.02 in new versioning scheme) suffers from an html injection vulnerability.\n\nSHA-256 | ed89f3f49d37ea4299f6f6221ace6ef8292ada73199f9aac17bae7cf6165fad3\n\nDownload\nSEC Consult Vulnerability Lab Security Advisory < 20221110-0 >\n=======================================================================\ntitle: HTML Injection\nproduct: BMC Remedy ITSM-Suite\nvulnerable version: 9.1.10 (= 20.02 in new versioning scheme)\nfixed version: 22.1\nCVE number: CVE-2022-26088\nimpact: Low\nhomepage: https://www.bmc.com/it-solutions/remedy-itsm.html\nfound: 2021-08-11\nby: Daniel Hirschberger (Office Bochum)\nSEC Consult Vulnerability Lab\n\nAn integrated part of SEC Consult, an Atos company\nEurope | Asia | North America\n\nhttps://www.sec-consult.com\n\n=======================================================================\n\nVendor description:\n-------------------\n\"Remedy IT Service Management Suite (Remedy ITSM Suite) and BMC Helix\nITSM service provide out of-the-box IT Information Library (ITIL)\nservice support functionality. Remedy ITSM Suite and BMC Helix ITSM\nservice streamline and automate the processes around IT service desk,\nasset management, and change management operations. It also enables\nyou to link your business services to your IT infrastructure to help\nyou manage the impact of technology changes on business and business\nchanges on technology \u2014 in real time and into the future. In addition,\nyou can understand and optimize the user experience, balance current\nand future infrastructure investments, and view potential impact on\nthe business by using a real-time service model.\"\n\nSource: https://docs.bmc.com/docs/itsm91/home-608490971.html\nBusiness recommendation:\n------------------------\nThe vendor provides an updated version which should be installed immediately.\n\nThe vendor states that:\n> We have done hardening in version 22.1.\n> However, we do not agree with assigning the CVE to this vulnerability.\n> As mentioned previously this is an informative vulnerability, and no real\nimpact is demonstrated.\nNevertheless, this can be used to trigger actions on internal services via CSRF or\nexfiltrate information.\nVulnerability overview/description:\n-----------------------------------\n1) HTML Injection (CVE-2022-26088)\nAn authenticated attacker who can forward incidents per email is able to inject\na limited set of HTML tags. This is accomplished by inserting arbitrary content\ninto the \"To:\" field of the email. There is a filtering mechanism that prevents\nthe injection of many HTML tags, for example \n\u2796 Sent by @TheFeedReaderBot \u2796\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T05:00:04.837465Z"}