Login Request a demo
BM
Vendor
Bmc
32 products with CVEs on record
106
CVEs
0
On KEV
12
New 30D
Products
BI
BMC IT Service Management Suite
BMC
6.9
9 CVEs0 on KEV9 new
CO
Control-M/Server
BMC
9.0
4 CVEs0 on KEV1 new
CM
Control-M/Enterprise Manager
BMC
8.0
3 CVEs0 on KEV1 new
BH
BMC Helix Operations Management
BMC
4.8
1 CVEs0 on KEV1 new
PA
Patrol Agent
Bmc
9.8
13 CVEs0 on KEV0 new
CO
Control-M/Agent
BMC
10.0
11 CVEs0 on KEV0 new
TR
Track-It!
BMC
9.8
11 CVEs0 on KEV0 new
RM
Remedy Mid-tier
Bmc
9.8
7 CVEs0 on KEV0 new
CO
Control-m
Bmc
9.8
6 CVEs0 on KEV0 new
RA
Remedy Action Request System
Bmc
8.8
6 CVEs0 on KEV0 new
FO
Footprints
Bmc
9.1
4 CVEs0 on KEV0 new
BS
Bladelogic Server Automation Console
Bmc
9.8
3 CVEs0 on KEV0 new
CF
Control-m/managed File Transfer
Bmc
9.8
3 CVEs0 on KEV0 new
PA
Patrol
Bmc
7.8
3 CVEs0 on KEV0 new
RA
Remedy AR System Server
Bmc
6.5
2 CVEs0 on KEV0 new
RS
Remedy Smart Reporting
Bmc
6.5
2 CVEs0 on KEV0 new
SA
Server Automation
Bmc
9.8
2 CVEs0 on KEV0 new
SD
Service Desk Express
Bmc
–
2 CVEs0 on KEV0 new
CM
Capacity Management Essentials
Bmc
–
1 CVEs0 on KEV0 new
FS
Footprints Service Core
Bmc
6.1
1 CVEs0 on KEV0 new
IM
Identity Management Suite
Bmc
–
1 CVEs0 on KEV0 new
MD
Myit Digital Workplace
Bmc
9.8
1 CVEs0 on KEV0 new
PP
Patrol Perform Agent
Bmc
–
1 CVEs0 on KEV0 new
PA
Performance Analysis For Servers
Bmc
–
1 CVEs0 on KEV0 new
PA
Performance Analyzer For Servers
Bmc
–
1 CVEs0 on KEV0 new
PA
Performance Assurance For Servers
Bmc
–
1 CVEs0 on KEV0 new
PA
Performance Assurance For Virtual Servers
Bmc
–
1 CVEs0 on KEV0 new
PM
Performance Manager
Bmc
–
1 CVEs0 on KEV0 new
PP
Performance Predictor For Servers
Bmc
–
1 CVEs0 on KEV0 new
RA
Remedy Action Request System Server
Bmc
6.5
1 CVEs0 on KEV0 new
RI
Remedy IT Service Management Suite
Bmc
5.4
1 CVEs0 on KEV0 new
SC
Software Control-m Agent
Bmc
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-113697
New
BH
BMC Helix Operations Management
BMC
4.8–Oct 29Reflected Cross-Site Scripting in BMC Helix Operations Management
CVE-2026-113696
New
BI
BMC IT Service Management Suite
BMC
5.3–Oct 29Improper Authorization in BMC ITSM SmartIT Change Approvals
CVE-2026-113695
New
BI
BMC IT Service Management Suite
BMC
4.8–Oct 29Reflected Cross-Site Scripting in BMC ITSM SmartIT
CVE-2026-113694
New
BI
BMC IT Service Management Suite
BMC
5.3–Oct 29Improper Authorization in BMC ITSM SmartIT Attachments
CVE-2026-113693
New
BI
BMC IT Service Management Suite
BMC
5.3–Oct 29System Account Credential Disclosure in BMC ITSM
CVE-2026-113692
New
BI
BMC IT Service Management Suite
BMC
6.9–Oct 29Path Traversal in BMC ITSM
CVE-2026-113691
New
BI
BMC IT Service Management Suite
BMC
5.1–Oct 29Stored Cross-Site Scripting in BMC ITSM Knowledge Articles
CVE-2026-113690
New
BI
BMC IT Service Management Suite
BMC
4.8–Oct 29Stored Cross-Site Scripting in BMC ITSM Attachments
CVE-2026-113689
New
BI
BMC IT Service Management Suite
BMC
5.1–Oct 29Stored Cross-Site Scripting in BMC ITSM Work Notes
CVE-2026-113688
New
BI
BMC IT Service Management Suite
BMC
5.3–Oct 29Server-Side Request Forgery in BMC ITSM SmartIT
CVE-2026-10537
New
CO
Control-M/Server
BMC
5.3
0%
Oct 27Remote unauthenticated information disclosure and denial of service due to unauthenticated service access
CVE-2026-10538
CO
Control-M/Server
BMC
8.0
0%
Jul 1Improper deserialization handling in Control-M Components
CVE-2026-10539
CO
Control-M/Server
BMC
9.0
0%
Jul 1Unauthenticated command injection in Control-M/Server communication command
CVE-2026-10540
CM
Control-M/Enterprise Manager
BMC
5.6
0%
Jul 1Weak password hash protection in Control-M/Entreprise Manager
CVE-2026-23782
CF
Control-m/managed File Transfer
Bmc
7.5
0%
Apr 10An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22
CVE-2026-23781
CF
Control-m/managed File Transfer
Bmc
9.8
0%
Apr 10An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22
CVE-2026-23780
CF
Control-m/managed File Transfer
Bmc
8.8
0%
Apr 10An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22
CVE-2025-71260
FO
Footprints
Bmc
8.8
34%
Mar 19BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE
CVE-2025-71259
FO
Footprints
Bmc
7.1
13%
Mar 19BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS
CVE-2025-71258
FO
Footprints
Bmc
7.1
17%
Mar 19BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb
CVE-2025-71257
FO
Footprints
Bmc
9.1
45%
Mar 19BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass
CVE-2025-55108
CO
Control-M/Agent
BMC
10.0
1%
Nov 5BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution
CVE-2025-55118
CO
Control-M/Agent
BMC
8.9
0%
Sep 16BMC Control-M/Agent memory corruption in SSL/TLS communication
CVE-2025-55117
CO
Control-M/Agent
BMC
5.3
0%
Sep 16BMC Control-M/Agent buffer overflow in SSL/TLS communication
CVE-2025-55116
CO
Control-M/Agent
BMC
8.8
0%
Sep 16BMC Control-M/Agent buffer overflow local privilege escalation
CVE-2025-55115
CO
Control-M/Agent
BMC
8.8
0%
Sep 16BMC Control-M/Agent path traversal local privilege escalation
CVE-2025-55114
CO
Control-M/Agent
BMC
5.3
0%
Sep 16BMC Control-M/Agent improper IP address filtering order
CVE-2025-55113
CO
Control-M/Agent
BMC
10.0
0%
Sep 16BMC Control-M/Agent unescaped NULL byte in access control list checks
CVE-2025-55112
CO
Control-M/Agent
BMC
7.4
0%
Sep 16BMC Control-M/Agent hardcoded Blowfish keys
CVE-2025-55111
CO
Control-M/Agent
BMC
5.5
0%
Sep 16BMC Control-M/Agent insecure default file permissions
CVE-2025-55110
CO
Control-M/Agent
BMC
5.5
0%
Sep 16BMC Control-M/Agent hardcoded default keystore password
CVE-2025-55109
CO
Control-M/Agent
BMC
9.0
0%
Sep 16BMC Control-M/Agent default SSL/TLS configuration authenticated bypass
CVE-2025-48709
CO
Control-M/Server
BMC
7.8
0%
Aug 7BMC Control-M/Server cleartext database credentials in process lists and logs
CVE-2024-34398
RM
Remedy Mid-tier
Bmc
4.2
0%
Mar 12An issue was discovered in BMC Remedy Mid Tier 7.6.04
CVE-2024-34399
RM
Remedy Mid-tier
Bmc
9.8
1%
Sep 18**UNSUPPORTED WHEN ASSIGNED** An issue was discovered in BMC Remedy Mid Tier 7.6.04
CVE-2021-35002
TR
Track-It!
BMC
8.8
2%
May 7BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability
CVE-2021-35001
TR
Track-It!
BMC
6.5
1%
May 7BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability
CVE-2024-1606
CO
Control-m
Bmc
5.4
0%
Mar 18Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of generated web pages via injection of HTML code
CVE-2024-1605
CO
Control-m
Bmc
7.8
0%
Mar 18BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that grants Write and Read permissions to all users
CVE-2024-1604
CO
Control-m
Bmc
6.8
0%
Mar 18Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to read and make unauthorized changes to any…
CVE-2020-35593
PA
Patrol Agent
Bmc
7.8
0%
Sep 5BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host
CVE-2017-9453
SA
Server Automation
Bmc
9.8
1%
Sep 5BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass
CVE-2023-39122
CO
Control-m
Bmc
9.8
1%
Jul 31BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter
CVE-2023-34258
PA
Patrol
Bmc
7.5
1%
May 31An issue was discovered in BMC Patrol before 22.1.00
CVE-2023-34257
PA
Patrol Agent
Bmc
9.8
1%
May 31An issue was discovered in BMC Patrol through 23.1.00
CVE-2023-26550
CO
Control-m
Bmc
9.8
1%
Feb 25A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field
CVE-2022-26088
RI
Remedy IT Service Management Suite
Bmc
5.4
1%
Nov 10An issue was discovered in BMC Remedy before 22.1
CVE-2022-35865
TR
Track-It!
BMC
9.8
2%
Aug 3This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109
CVE-2022-35864
TR
Track-It!
BMC
6.5
2%
Aug 3This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109
CVE-2022-24047
TR
Track-it!
Bmc
9.8
2%
Feb 18This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102
CVE-2017-17678
RM
Remedy Mid-tier
Bmc
6.1
1%
May 19BMC Remedy Mid Tier 9.1SP3 is affected by cross-site scripting (XSS)
CVE-2017-17677
RM
Remedy Mid-tier
Bmc
8.8
1%
May 19BMC Remedy 9.1SP3 is affected by authenticated code execution
CVE-2017-17675
RM
Remedy Mid-tier
Bmc
5.3
1%
May 19BMC Remedy Mid Tier 9.1SP3 is affected by log hijacking
CVE-2017-17674
RM
Remedy Mid-tier
Bmc
9.8
2%
May 19BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion
CVE-2015-5072
RA
Remedy AR System Server
Bmc
6.5
2%
Jan 15The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files…
CVE-2015-5071
RA
Remedy AR System Server
Bmc
6.5
2%
Jan 15AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the…
CVE-2019-11216
RS
Remedy Smart Reporting
Bmc
6.5
2%
Dec 4BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality
CVE-2019-17044
PA
Patrol Agent
Bmc
7.8
0%
Oct 14An issue was discovered in BMC Patrol Agent 9.0.10i
CVE-2019-17043
PA
Patrol Agent
Bmc
7.8
0%
Oct 14An issue was discovered in BMC Patrol Agent 9.0.10i
CVE-2019-16755
MD
Myit Digital Workplace
Bmc
9.8
3%
Sep 26BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands…