Skip to content
OpenAdvisories

Vendor

BMC Software

5 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-71259 EPSS 13%

    BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS

    BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticated attackers to trigger arbitrary outbound requests from the server. Attackers ca…

  • Medium 4.3
    CVE-2025-71258 EPSS 17%

    BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb

    BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackers to cause the server to initiate arbitrary outbound requests. Attackers can …