Read the docs

BMC Software, Inc.

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

BMC Software, Inc. records in CISA KEV

No BMC Software, Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

11 records

Priority HIGH 81

Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01 Published 2025-12-11 No fix listed CWE-434
Priority HIGH 73

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary co…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.3436 Published 2026-03-19 No fix listed CWE-502
Priority HIGH 70

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.45302 Published 2026-03-19 No fix listed CWE-306
Priority MEDIUM 57

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticated attackers to trigger arbitrary outbound…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.12916 Published 2026-03-19 No fix listed CWE-918
Priority MEDIUM 57

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackers to cause the server to initiate arbi…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.1743 Published 2026-03-19 No fix listed CWE-918
Priority MEDIUM 41

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01596 Published 2020-04-30 No fix listed CWE-120
Open these records in search →