Product by BMC
Control-m/agent
11 known vulnerabilities in Control-m/agent (BMC), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-55108 | BMC Control-M/Agent: Missing Authentication for Critical Function | 10.0 | |
| Critical | CVE-2025-55109 | BMC Control-M/Agent default SSL/TLS configuration authenticated bypass | 9.0 | |
| High | CVE-2025-55118 | BMC Control-M/Agent memory corruption in SSL/TLS communication | 8.9 | |
| Critical | CVE-2025-55113 | BMC Control-M/Agent unescaped NULL byte in access control list checks | 9.0 | |
| Critical | CVE-2025-55115 | BMC Control-M/Agent path traversal local privilege escalation | 8.8 | |
| Critical | CVE-2025-55116 | BMC Control-M/Agent buffer overflow local privilege escalation | 8.8 | |
| Medium | CVE-2025-55114 | BMC Control-M/Agent improper IP address filtering order | 5.3 | |
| High | CVE-2025-55112 | BMC Control-M/Agent hardcoded Blowfish keys | 7.4 | |
| Medium | CVE-2025-55117 | BMC Control-M/Agent buffer overflow in SSL/TLS communication | 5.3 | |
| Medium | CVE-2025-55110 | BMC Control-M/Agent hardcoded default keystore password | 5.5 | |
| Medium | CVE-2025-55111 | BMC Control-M/Agent insecure default file permissions | 5.5 |