Skip to content
OpenAdvisories

Vendor

BMC Software

5 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-71260 EPSS 34%

    BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE

    BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serial…

  • High 7.3
    CVE-2025-71257 Public exploit EPSS 45%

    BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass

    BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets. Unauthenticated remote attackers can bypass access control…