Bmc Control-M
5 CVEs affecting Bmc Control-M. Latest disclosed: 2024-03-18. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-39122 | Critical | 9.8 | 2023-07-31 | BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 (and is also fixed by… |
CVE-2023-26550 | Critical | 9.8 | 2023-02-25 | A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field. |
CVE-2024-1605 | Medium | 6.6 | 2024-03-18 | BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that grants Write and Read permissions to all… |
CVE-2024-1604 | Medium | 6.4 | 2024-03-18 | Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to read and make unautho… |
CVE-2024-1606 | Medium | 4.6 | 2024-03-18 | Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of generated web pages via injection of HTML… |