Name of the Vulnerable Software and Affected Versions:
BMC Remedy Mid Tier version 7.6.04
Description:
The web application in BMC Remedy Mid Tier allows stored HTML Injection by authenticated remote attackers.
Recommendations:
For BMC Remedy Mid Tier version 7.6.04, consider restricting access to the web application until a patch is available. As a temporary workaround, limit the ability of authenticated remote attackers to inject HTML code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.