BMC

Records97All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high27CVSS 7.0–8.9

Exploited now

BMC records in CISA KEV

No BMC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Patrol Agent 13 records HIGH Track-it! 11 records HIGH Control-m/agent 7 records MEDIUM Remedy Mid-tier 7 records MEDIUM Remedy Action Request System 6 records MEDIUM Control-m 5 records HIGH Footprints 4 records HIGH Bladelogic Server Automation Console 3 records HIGH

Records

6 records in Remedy Action Request System · all components

TI-2018-13363 CVE-2018-18862 · GHSA-35xg-8w82-5395

BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access…

MEDIUM 43

BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Details/Default+Admin+View/, AST%3AARServerConnection/Default+Admi…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02886 Published 2019-03-17 No fix listed CWE-425

TI-2017-13408 CVE-2017-18223 · GHSA-wxm5-4pwv-vmxx

BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows…

LOW 37

BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.00966 Published 2018-03-10 No fix listed CWE-287

TI-2016-02111 CVE-2016-2349 · GHSA-gmx4-3375-7g3w

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers…

LOW 35

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01057 Published 2016-12-21 No fix listed CWE-640

TI-2015-07636 CVE-2015-9257 · GHSA-xh2r-qhcq-qqr8

BMC Remedy Action Request (AR) System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS.

LOW 28

BMC Remedy Action Request (AR) System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00635 Published 2018-03-24 No fix listed CWE-79

TI-2007-00301 CVE-2007-0310 · GHSA-hvxm-xpq9-6rhp

BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages…

LOW 27

BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine v…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01888 Published 2007-01-18 No fix listed

TI-2017-13413 CVE-2017-18228 · GHSA-xpwq-6mfc-rr7g

Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an…

LOW 25

Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys/servlet/AttachServlet request.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00511 Published 2018-03-12 No fix listed CWE-79

Open these records in search →

Critical	24
High	27
Medium	45
Low	1
No CVSS	0