Login Request a demo
TR
Product
Track-It!
by BMC · last CVE May 7, 2024
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 4High 1Medium 2Low 0
Severity
All severities11Critical4High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Track-It! to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-35865
9.8
2%
Aug 3
This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109
Affected: 20.21.2.109
CVE-2022-24047
9.8
2%
Feb 18
This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102
Affected: 20.21.01.102
CVE-2016-6599
9.8
12%
Jan 30
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010
Affected: through 11.4; 11.4; 11.4
CVE-2016-6598
9.8
19%
Jan 30
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010
Affected: through 11.4; 11.4; 11.4
CVE-2021-35002
8.8
2%
May 7
BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability
Affected: 20.21.01.102
CVE-2021-35001
6.5
1%
May 7
BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability
Affected: 20.21.01.102
CVE-2022-35864
6.5
2%
Aug 3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109
Affected: 20.21.02.109
CVE-2014-8270
–
20%
Dec 12
BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing…
Affected: 11.3
CVE-2014-4874
–
9%
Oct 10
BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment page
Affected: 11.3.0.355
CVE-2014-4873
–
4%
Oct 10
SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data
Affected: 11.3.0.355
CVE-2014-4872
–
79%
Oct 10
BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive…
Affected: 11.3.0.355
Showing 11