Vendor
BMC
97 known vulnerabilities in products by BMC, 0 of them actively exploited (CISA KEV).
Key figures
97
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
21
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-71260 | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE | 8.8 | |
| Critical | CVE-2025-71257 | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass | 7.3 | |
| Critical | CVE-2016-6598 | BMC Track-It!: Code Execution | 9.8 | |
| Critical | CVE-2016-6599 | BMC Track-It!: security vulnerability | 9.8 | |
| Critical | CVE-2019-8352 | BMC Software PATROL Agent: Privilege Escalation | 9.8 | |
| Critical | CVE-2016-4322 | BMC BladeLogic Server Automation Console: Authentication Bypass | 9.8 | |
| High | CVE-2025-71258 | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb | 4.3 | |
| High | CVE-2016-1542 | BMC BladeLogic Server Automation Console: security vulnerability | 7.5 | |
| High | CVE-2016-1543 | BMC BladeLogic Server Automation Console: security vulnerability | 7.5 | |
| High | CVE-2025-71259 | BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS | 4.3 | |
| High | CVE-2018-20735 | BMC Software PATROL Agent: security vulnerability | 7.8 | |
| Critical | CVE-2019-16755 | bmc MyIT Digital Workplace: security vulnerability | 9.8 | |
| High | CVE-2018-18862 | Bmc Remedy Mid-tier: Improper Access Control | 8.8 | |
| Critical | CVE-2017-17674 | Bmc Remedy Mid-tier: File Inclusion | 9.8 | |
| Medium | CVE-2016-5063 | BMC Server Automation: security vulnerability | 5.3 | |
| High | CVE-2021-35002 | BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability | 8.8 | |
| Critical | CVE-2022-35865 | BMC Track-It!: Missing Authentication for Critical Function | 7.3 | |
| Critical | CVE-2025-55108 | BMC Control-M/Agent: Missing Authentication for Critical Function | 10.0 | |
| Critical | CVE-2023-34257 | BMC Software PATROL Agent: Code Execution | 9.8 | |
| Medium | CVE-2019-11216 | BMC Remedy Smart Reporting: XML External Entity (XXE) | 6.5 | |
| Medium | CVE-2015-5071 | BMC Remedy Ar System Server: security vulnerability | 6.5 | |
| Medium | CVE-2015-5072 | BMC Remedy Ar System Server: security vulnerability | 6.5 | |
| Not rated | CVE-2014-4872 | BMC Track-It!: Code Execution | — | |
| Critical | CVE-2026-10539 | Unauthenticated command injection in Control-M/Server communication command | 9.0 | |
| Medium | CVE-2018-19505 | Bmc Remedy Action Request System Server 5.x/6.x: security vulnerability | 6.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,