Vendors / BMC Records 97 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 24 CVSS 9.0–10.0
CVSS high 27 CVSS 7.0–8.9
Exploited now BMC records in CISA KEV No BMC vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00518 · Published 2024-09-18 · No fix listed CWE-287
Priority MEDIUM 46
BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02076 · Published 2021-05-19 · No fix listed CWE-918
Priority MEDIUM 43
BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Details/Default+Admin+View/, AST%3AARServerConnection/Default+Admi…
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02886 · Published 2019-03-17 · No fix listed CWE-425
Priority MEDIUM 40
BMC Remedy 9.1SP3 is affected by authenticated code execution.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0106 · Published 2021-05-19 · No fix listed CWE-732
Priority LOW 28
BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting (XSS).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00591 · Published 2021-05-19 · No fix listed CWE-79
Priority LOW 26
BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00867 · Published 2021-05-19 · No fix listed CWE-532
Priority LOW 21
An issue was discovered in BMC Remedy Mid Tier 7.6.04.
CVSS 3.1 MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.00253 · Published 2025-03-12 · No fix listed CWE-80
Open these records in search → All records by CVSS severity
Critical24 High27 Medium45 Low1 No CVSS0