CVE-2024-34398

Name of the Vulnerable Software and Affected Versions: BMC Remedy Mid Tier version 7.6.04

Description: The web application in BMC Remedy Mid Tier allows stored HTML Injection by authenticated remote attackers.

Recommendations: For BMC Remedy Mid Tier version 7.6.04, consider restricting access to the web application until a patch is available. As a temporary workaround, limit the ability of authenticated remote attackers to inject HTML code. At the moment, there is no information about a newer version that contains a fix for this vulnerability.