Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: BMC Software, Inc. Clear all filters
TI-2025-43385 CVE-2025-71260 · GHSA-x6vr-xp32-5v9x

BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE

Priority HIGH 73

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary co…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.3436 Published 2026-03-19 No fix listed CWE-502
TI-2025-43384 CVE-2025-71259 · GHSA-787q-47vg-6mqr

BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS

Priority MEDIUM 57

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticated attackers to trigger arbitrary outbound…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.12916 Published 2026-03-19 No fix listed CWE-918
TI-2025-43383 CVE-2025-71258 · GHSA-9693-8gw9-r7fg

BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb

Priority MEDIUM 57

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackers to cause the server to initiate arbi…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.1743 Published 2026-03-19 No fix listed CWE-918
TI-2025-43382 CVE-2025-71257 · GHSA-5pjp-c363-m6g8

BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass

Priority HIGH 70

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.45302 Published 2026-03-19 No fix listed CWE-306
TI-2024-38395 CVE-2024-58298 · GHSA-xfg6-cf6g-5887

Compuware iStrobe Web 20.13 Pre-Auth Remote Code Execution via File Upload

Priority HIGH 81

Compuware iStrobe Web 20.13 contains a pre-authentication remote code execution vulnerability that allows unauthenticated attackers to upload malicious JSP files through a path traversal in the file upload form.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01 Published 2025-12-11 No fix listed CWE-434
TI-2019-13845 CVE-2019-19215 · GHSA-wfjr-fx5q-m6gw

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action…

Priority MEDIUM 41

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01596 Published 2020-04-30 No fix listed CWE-120