Bmc vulnerabilities

Products

• Patrol Agent 13
• Control-m/agent 11
• Track-it\! 11
• It Service Management Suite 9
• Control-m\/agent 7
• Remedy Mid-tier 7
• Control-m 6
• Remedy Action Request System 6
• Track-it! 5
• Control-m/server 4
• Footprints 4
• Bladelogic Server Automation Console 3
• Control-m/enterprise Manager 3
• Control-m\/managed File Transfer 3
• Patrol 3
• Remedy Ar System Server 2
• Remedy Smart Reporting 2
• Server Automation 2
• Service Desk Express 2

Newest

• bmc helix operations management Reflected Cross-Site Scripting in BMC Helix Operations Management CVE-2026-113697 4.8 MediumOctober 29, 2026
• bmc it service management suite Improper Authorization in BMC ITSM SmartIT Change Approvals CVE-2026-113696 5.3 MediumOctober 29, 2026
• bmc it service management suite Reflected Cross-Site Scripting in BMC ITSM SmartIT CVE-2026-113695 4.8 MediumOctober 29, 2026
• bmc it service management suite Improper Authorization in BMC ITSM SmartIT Attachments CVE-2026-113694 5.3 MediumOctober 29, 2026
• bmc it service management suite System Account Credential Disclosure in BMC ITSM CVE-2026-113693 5.3 MediumOctober 29, 2026
• bmc it service management suite Path Traversal in BMC ITSM CVE-2026-113692 6.9 MediumOctober 29, 2026
• bmc it service management suite Stored Cross-Site Scripting in BMC ITSM Knowledge Articles CVE-2026-113691 5.1 MediumOctober 29, 2026
• bmc it service management suite Stored Cross-Site Scripting in BMC ITSM Attachments CVE-2026-113690 4.8 MediumOctober 29, 2026
• bmc it service management suite Stored Cross-Site Scripting in BMC ITSM Work Notes CVE-2026-113689 5.1 MediumOctober 29, 2026
• bmc it service management suite Server-Side Request Forgery in BMC ITSM SmartIT CVE-2026-113688 5.3 MediumOctober 29, 2026
• bmc control-m/enterprise manager, control-m/server +1 more Remote unauthenticated information disclosure and denial of service due to unauthenticated service access CVE-2026-10537 6.9 MediumOctober 27, 2026
• bmc control-m/enterprise manager, control-m/server +1 more Improper deserialization handling in Control-M Components CVE-2026-10538 8.9 HighJuly 1, 2026
• bmc control-m/server Unauthenticated command injection in Control-M/Server communication command CVE-2026-10539 9.5 CriticalJuly 1, 2026
• bmc control-m/enterprise manager Weak password hash protection in Control-M/Entreprise Manager CVE-2026-10540 5.6 MediumJuly 1, 2026
• bmc control-m\/managed file transfer An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. An API management endpoint... CVE-2026-23782 7.5 HighApril 10, 2026
• bmc control-m\/managed file transfer An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A set of default debug user... CVE-2026-23781 9.8 CriticalApril 10, 2026
• bmc control-m\/managed file transfer An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A SQL injection vulnerability... CVE-2026-23780 8.8 HighApril 10, 2026
• bmc footprints BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE CVE-2025-71260 EPSS 34.4% 8.7 HighMarch 19, 2026
• bmc footprints BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS CVE-2025-71259 EPSS 12.9% 5.3 MediumMarch 19, 2026
• bmc footprints BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb CVE-2025-71258 EPSS 17.4% 5.3 MediumMarch 19, 2026
• bmc footprints BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass CVE-2025-71257 Public exploit EPSS 45.3% 6.9 MediumMarch 19, 2026
• bmc control-m/agent BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution CVE-2025-55108 9.5 CriticalNovember 5, 2025
• bmc control-m/agent BMC Control-M/Agent memory corruption in SSL/TLS communication CVE-2025-55118 8.4 HighSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent buffer overflow in SSL/TLS communication CVE-2025-55117 6.3 MediumSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent buffer overflow local privilege escalation CVE-2025-55116 9.3 CriticalSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent path traversal local privilege escalation CVE-2025-55115 9.3 CriticalSeptember 16, 2025
• bmc control-m/agent BMC Control-M/Agent improper IP address filtering order CVE-2025-55114 6.9 MediumSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent unescaped NULL byte in access control list checks CVE-2025-55113 9.5 CriticalSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent hardcoded Blowfish keys CVE-2025-55112 7.6 HighSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent insecure default file permissions CVE-2025-55111 5.7 MediumSeptember 16, 2025
• bmc control-m/agent BMC Control-M/Agent hardcoded default keystore password CVE-2025-55110 5.7 MediumSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent default SSL/TLS configuration authenticated bypass CVE-2025-55109 9.5 CriticalSeptember 16, 2025
• bmc control-m, control-m/server, control-m\/server +2 more BMC Control-M/Server cleartext database credentials in process lists and logs CVE-2025-48709 4.8 MediumAugust 7, 2025
• bmc remedy mid-tier An issue was discovered in BMC Remedy Mid Tier 7.6.04. The web application allows stored HTML... CVE-2024-34398 4.2 MediumMarch 12, 2025
• bmc remedy mid-tier **UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04. An... CVE-2024-34399 9.8 CriticalSeptember 18, 2024
• bmc track-it!, track-it\! +1 more BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability CVE-2021-35002 8.8 HighMay 7, 2024
• bmc track-it!, track-it\! +1 more BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability CVE-2021-35001 3.1 LowMay 7, 2024
• bmc control-m HTML injection in BMC Control-M CVE-2024-1606 4.6 MediumMarch 18, 2024
• bmc control-m DLL side-loading in BMC Control-M CVE-2024-1605 6.6 MediumMarch 18, 2024
• bmc control-m Incorrect authorization in BMC Control-M CVE-2024-1604 6.4 MediumMarch 18, 2024
• bmc patrol agent BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig... CVE-2020-35593 7.8 HighSeptember 5, 2023
• bmc server automation BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of... CVE-2017-9453 9.0 CriticalSeptember 5, 2023
• bmc control-m BMC Control-M Software v9.0.20.200 was discovered to contain a SQL injection vulnerability via... CVE-2023-39122 9.8 CriticalJuly 31, 2023
• bmc patrol An issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely... CVE-2023-34258 7.5 HighMay 31, 2023
• bmc patrol agent ** DISPUTED ** An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration... CVE-2023-34257 Disputed 9.8 CriticalMay 31, 2023
• bmc control-m A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute... CVE-2023-26550 9.8 CriticalFebruary 25, 2023
• bmc remedy it service management suite An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote... CVE-2022-26088 5.4 MediumNovember 10, 2022
• bmc track-it!, track-it\! +1 more This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2022-35865 7.3 HighAugust 3, 2022
• bmc track-it!, track-it\! +1 more This vulnerability allows remote attackers to disclose sensitive information on affected... CVE-2022-35864 5.3 MediumAugust 3, 2022
• bmc track-it!, track-it\! +1 more This vulnerability allows remote attackers to bypass authentication on affected installations of... CVE-2022-24047 5.3 MediumFebruary 18, 2022
• Show olderLoading…