Vulnerabilities in BMC
34 resultsCVE-2026-113693MEDIUMSystem Account Credential Disclosure in BMC ITSMEPSS 0.3%CVE-2025-55117MEDIUMBMC Control-M/Agent buffer overflow in SSL/TLS communicationEPSS 0.3%CVE-2026-113694MEDIUMImproper Authorization in BMC ITSM SmartIT AttachmentsEPSS 0.3%CVE-2026-113688MEDIUMServer-Side Request Forgery in BMC ITSM SmartITEPSS 0.3%CVE-2025-55113CRITICALBMC Control-M/Agent unescaped NULL byte in access control list checksEPSS 0.3%CVE-2026-10537MEDIUMRemote unauthenticated information disclosure and denial of service due to unauthenticated service accessEPSS 0.3%CVE-2025-55112HIGHBMC Control-M/Agent hardcoded Blowfish keysEPSS 0.2%CVE-2024-1605MEDIUMDLL side-loading in BMC Control-MEPSS 0.2%CVE-2025-55115CRITICALBMC Control-M/Agent path traversal local privilege escalationEPSS 0.2%CVE-2025-55116CRITICALBMC Control-M/Agent buffer overflow local privilege escalationEPSS 0.2%CVE-2025-48709MEDIUMBMC Control-M/Server cleartext database credentials in process lists and logsEPSS 0.1%CVE-2025-55110MEDIUMBMC Control-M/Agent hardcoded default keystore passwordEPSS 0.1%CVE-2025-55111MEDIUMBMC Control-M/Agent insecure default file permissionsEPSS 0.1%CVE-2026-10540MEDIUMWeak password hash protection in Control-M/Entreprise ManagerEPSS 0.1%