Skip to content
OpenAdvisories

Product · BMC

Control-M/Enterprise Manager

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-10537

    Remote unauthenticated information disclosure and denial of service due to unauthenticated service access

    A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service avai…

    BMC Control-M/Server Control-M/Enterprise Manager
  • Medium 5.6
    CVE-2026-10540

    Weak password hash protection in Control-M/Entreprise Manager

    The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupp…

    BMC Control-M/Enterprise Manager