Vendors / BMC Records 97 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 24
CVSS high 27
Exploited now BMC records in CISA KEV No BMC vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.79313 · Published 2014-10-10 · No fix listed CWE-306
Priority MEDIUM 60
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1924 · Published 2018-01-30 · No fix listed CWE-284
Priority MEDIUM 56
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.12313 · Published 2018-01-30 · No fix listed CWE-255
Priority MEDIUM 52
This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01966 · Published 2022-08-03 · No fix listed CWE-306
Priority MEDIUM 46
This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01895 · Published 2022-02-18 · No fix listed CWE-288
Priority MEDIUM 43
BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01652 · Published 2024-05-07 · No fix listed CWE-434
Priority MEDIUM 41
BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.19932 · Published 2014-12-12 · No fix listed CWE-264
Priority LOW 36
SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data.
CVSS 2.0 MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.04187 · Published 2014-10-10 · No fix listed CWE-89
Priority LOW 32
This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01648 · Published 2022-08-03 · No fix listed CWE-89
Priority LOW 30
BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00757 · Published 2024-05-07 · No fix listed CWE-862
Priority LOW 30
BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment page.
CVSS 2.0 MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.08882 · Published 2014-10-10 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
24 27 45 1 0
THREATIST.IORead the docs