PatchTheCVEfootprints vulnerabilities and fixes
Recent CVEs affecting footprints, with upgrade or downgrade steps. 5 tracked.
footprints has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-03-19. Highest priority: CVE-2025-71260 (score 60/100).
- CVE-2025-71260 HIGH 8.8 UPGRADE BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnera
- CVE-2025-71258 MEDIUM 4.3 UPGRADE BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnera
- CVE-2025-71259 MEDIUM 4.3 UPGRADE BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnera
- CVE-2025-71257 HIGH 7.3 UPGRADE BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due
- CVE-2008-7158 HIGH 10.0 DOWNGRADE Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary command
FAQ
How do I fix footprints vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is footprints being exploited right now?
None of the tracked footprints CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which footprints CVE should I patch first?
CVE-2025-71260 currently ranks highest (60/100): BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnera.