Advisories · Technology
BMC Control-M/Server.
Every CVE that names BMC Control-M/Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Remote unauthenticated information disclosure and denial of service due to unauthenticated service access
- BMC Control-M/Enterprise Manager
- BMC Control-M/Server
- CWE-305
- CVSS 8.9 High
Improper deserialization handling in Control-M Components
- BMC Control-M/Enterprise Manager
- BMC Control-M/Server
- Insecure deserialization
- CVSS 9.5 CriticalCritical · CVSS 9+
Unauthenticated command injection in Control-M/Server communication command
- BMC Control-M/Server
- CWE-305
- CVSS 4.8 Medium
BMC Control-M/Server cleartext database credentials in process lists and logs
- BMC Control-M/Server
- Information disclosure
- CWE-214