CO
Product
Control-M/Agent
11
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 4Low 0
Watch
Add Control-M/Agent to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55108 | 10.0 | Nov 5 | BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution Affected: 9.0.22; 9.0.21; 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55113 | 10.0 | Sep 16 | BMC Control-M/Agent unescaped NULL byte in access control list checks Affected: 9.0.22.000; 9.0.21; 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55109 | 9.0 | Sep 16 | BMC Control-M/Agent default SSL/TLS configuration authenticated bypass Affected: 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55118 | 8.9 | Sep 16 | BMC Control-M/Agent memory corruption in SSL/TLS communication Affected: 9.0.22.000; 9.0.21; 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55116 | 8.8 | Sep 16 | BMC Control-M/Agent buffer overflow local privilege escalation Affected: 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55115 | 8.8 | Sep 16 | BMC Control-M/Agent path traversal local privilege escalation Affected: 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55112 | 7.4 | Sep 16 | BMC Control-M/Agent hardcoded Blowfish keys Affected: 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55111 | 5.5 | Sep 16 | BMC Control-M/Agent insecure default file permissions Affected: 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55110 | 5.5 | Sep 16 | BMC Control-M/Agent hardcoded default keystore password Affected: 9.0.22; 9.0.21; 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55117 | 5.3 | Sep 16 | BMC Control-M/Agent buffer overflow in SSL/TLS communication Affected: 9.0.22.000; 9.0.21; 9.0.20; 9.0.19; 9.0.18 |
| CVE-2025-55114 | 5.3 | Sep 16 | BMC Control-M/Agent improper IP address filtering order Affected: 9.0.20; 9.0.19; 9.0.18 |
Showing 11