bmcsoftware vulnerabilities

Recent CVEs affecting bmcsoftware products. 6 tracked.

bmcsoftware has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-04-30. Highest priority: CVE-2019-19220 (score 50/100).

• CVE-2019-19220 HIGH 8.8 DOWNGRADE BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2).
• CVE-2019-19219 HIGH 7.5 DOWNGRADE BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download.
• CVE-2019-19218 HIGH 7.5 DOWNGRADE BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage.
• CVE-2019-19217 HIGH 8.8 DOWNGRADE BMC Control-M/Agent 7.0.00.000 allows OS Command Injection.
• CVE-2019-19216 HIGH 8.8 DOWNGRADE BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy.
• CVE-2019-19215 HIGH 8.8 DOWNGRADE A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail an

FAQ

How do I fix bmcsoftware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is bmcsoftware being exploited right now?

None of the tracked bmcsoftware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which bmcsoftware CVE should I patch first?

CVE-2019-19220 currently ranks highest (50/100): BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2)..

Products

• control-m\/agent

RSS feed for bmcsoftware · ← Back to latest CVEs