Bmc Control-m vulnerabilities

• bmc control-m/enterprise manager, control-m/server +1 more Remote unauthenticated information disclosure and denial of service due to unauthenticated service access CVE-2026-10537 6.9 MediumOctober 27, 2026
• bmc control-m/enterprise manager, control-m/server +1 more Improper deserialization handling in Control-M Components CVE-2026-10538 8.9 HighJuly 1, 2026
• bmc control-m/server Unauthenticated command injection in Control-M/Server communication command CVE-2026-10539 9.5 CriticalJuly 1, 2026
• bmc control-m/enterprise manager Weak password hash protection in Control-M/Entreprise Manager CVE-2026-10540 5.6 MediumJuly 1, 2026
• bmc control-m\/managed file transfer An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. An API management endpoint... CVE-2026-23782 7.5 HighApril 10, 2026
• bmc control-m\/managed file transfer An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A set of default debug user... CVE-2026-23781 9.8 CriticalApril 10, 2026
• bmc control-m\/managed file transfer An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A SQL injection vulnerability... CVE-2026-23780 8.8 HighApril 10, 2026
• bmc control-m/agent BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution CVE-2025-55108 9.5 CriticalNovember 5, 2025
• bmc control-m/agent BMC Control-M/Agent memory corruption in SSL/TLS communication CVE-2025-55118 8.4 HighSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent buffer overflow in SSL/TLS communication CVE-2025-55117 6.3 MediumSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent buffer overflow local privilege escalation CVE-2025-55116 9.3 CriticalSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent path traversal local privilege escalation CVE-2025-55115 9.3 CriticalSeptember 16, 2025
• bmc control-m/agent BMC Control-M/Agent improper IP address filtering order CVE-2025-55114 6.9 MediumSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent unescaped NULL byte in access control list checks CVE-2025-55113 9.5 CriticalSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent hardcoded Blowfish keys CVE-2025-55112 7.6 HighSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent insecure default file permissions CVE-2025-55111 5.7 MediumSeptember 16, 2025
• bmc control-m/agent BMC Control-M/Agent hardcoded default keystore password CVE-2025-55110 5.7 MediumSeptember 16, 2025
• bmc control-m/agent, control-m\/agent +1 more BMC Control-M/Agent default SSL/TLS configuration authenticated bypass CVE-2025-55109 9.5 CriticalSeptember 16, 2025
• bmc control-m, control-m/server, control-m\/server +2 more BMC Control-M/Server cleartext database credentials in process lists and logs CVE-2025-48709 4.8 MediumAugust 7, 2025
• bmc control-m HTML injection in BMC Control-M CVE-2024-1606 4.6 MediumMarch 18, 2024
• bmc control-m DLL side-loading in BMC Control-M CVE-2024-1605 6.6 MediumMarch 18, 2024
• bmc control-m Incorrect authorization in BMC Control-M CVE-2024-1604 6.4 MediumMarch 18, 2024
• bmc control-m BMC Control-M Software v9.0.20.200 was discovered to contain a SQL injection vulnerability via... CVE-2023-39122 9.8 CriticalJuly 31, 2023
• bmc control-m A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute... CVE-2023-26550 9.8 CriticalFebruary 25, 2023
• bmc software control-m agent BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to... CVE-2005-3311 2.1 LowOctober 25, 2005