Vulnerabilities

TI-2021-13989 CVE-2021-35002 · GHSA-5vhv-75fm-37r9

Unrestricted file upload in BMC Track-It!

MEDIUM 43

BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01652 Published 2024-05-07 No fix listed CWE-434

TI-2021-13988 CVE-2021-35001 · GHSA-jc9x-wh9f-2xf3

Missing authorization in BMC Track-It!

LOW 30

BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00757 Published 2024-05-07 No fix listed CWE-862

TI-2022-16296 CVE-2022-35865 · GHSA-4q54-fjqv-3cjf

Missing authentication in BMC Track-It!

MEDIUM 52

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01966 Published 2022-08-03 No fix listed CWE-306

TI-2022-16295 CVE-2022-35864 · GHSA-xmq8-c3h6-wf48

SQL injection in BMC Track-It!

LOW 32

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01648 Published 2022-08-03 No fix listed CWE-89

TI-2022-08007 CVE-2022-24047 · GHSA-xrq6-2chv-2c9r

Authentication bypass in BMC Track-It!

MEDIUM 46

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01895 Published 2022-02-18 No fix listed CWE-288

TI-2016-05649 CVE-2016-6599 · GHSA-8jf3-x896-4634

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration…

MEDIUM 56

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.12313 Published 2018-01-30 No fix listed CWE-255

TI-2016-05648 CVE-2016-6598 · GHSA-58cq-gm2c-925j

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage…

MEDIUM 60

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.1924 Published 2018-01-30 No fix listed CWE-284

TI-2014-06812 CVE-2014-8270 · GHSA-55mw-2wr5-82m9

BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code…

MEDIUM 41

BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.19932 Published 2014-12-12 No fix listed CWE-264

TI-2014-04011 CVE-2014-4874 · GHSA-9p58-2gqp-836p

BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by…

LOW 30

BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment page.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.08882 Published 2014-10-10 No fix listed CWE-200

TI-2014-04010 CVE-2014-4873 · GHSA-8625-7rgv-h99h

SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows…

LOW 36

SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04187 Published 2014-10-10 No fix listed CWE-89

TI-2014-04009 CVE-2014-4872 · GHSA-frq5-wqm4-xjr8

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows…

HIGH 73

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.79313 Published 2014-10-10 No fix listed CWE-306

Vulnerabilities

Filters