CO
Product
Control-M/Server
4
CVEs
0
On KEV
9.0
Max CVSS
1
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add Control-M/Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10539 | 9.0 | Jul 1 | Unauthenticated command injection in Control-M/Server communication command Affected: 9.0.20 through 9.0.21.200 |
| CVE-2026-10538 | 8.0 | Jul 1 | Improper deserialization handling in Control-M Components Affected: 9.0.20 before 9.0.21 |
| CVE-2025-48709 | 7.8 | Aug 7 | BMC Control-M/Server cleartext database credentials in process lists and logs Affected: 9.0.21.300 before PACTV.9.0.21.307 |
| CVE-2026-10537 New | 5.3 | Oct 27 | Remote unauthenticated information disclosure and denial of service due to unauthenticated service access Affected: 9.0.20 before 9.0.22 |
Showing 4