CVE-2024-34398

4.2 mediumEPSS 0.3%

Medium (4.2) in bmc remedy mid-tier. EPSS 0.3% chance of exploitation in the next 30 days.

An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML Injection by authenticated remote attackers.

Severity

4.2 medium

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-80
Published: 2025-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19