Vendors / BMC Software, Inc. Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 7 CVSS 7.0–8.9
Exploited now BMC Software, Inc. records in CISA KEV No BMC Software, Inc. vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2).
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01815 · Published 2020-04-30 · No fix listed CWE-78
Priority MEDIUM 42
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01815 · Published 2020-04-30 · No fix listed CWE-78
Priority MEDIUM 41
A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01596 · Published 2020-04-30 · No fix listed CWE-120
Priority MEDIUM 40
BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01057 · Published 2020-04-30 · No fix listed CWE-269
Priority LOW 35
BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01052 · Published 2020-04-30 · No fix listed
Priority LOW 35
BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00997 · Published 2020-04-30 · No fix listed CWE-522
Open these records in search → All records by CVSS severity
Critical1 High7 Medium3 Low0 No CVSS0