Skip to content
OpenAdvisories

Product · BMC

Control-M

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.6
    CVE-2024-1606

    HTML injection in BMC Control-M

    Lack of input sanitization in BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users for manipulation of generated web pages via injection of HTML code. This might lead to a successful phishing attack for example by tricking users into using a hyperl…

    BMC Control-M
  • Medium 6.6
    CVE-2024-1605

    DLL side-loading in BMC Control-M

    BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that grants Write and Read permissions to all users. Leveraging it leads to loading of a potentially malicious libraries, which will execute with t…

    BMC Control-M
  • Medium 6.4
    CVE-2024-1604

    Incorrect authorization in BMC Control-M

    Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to read and make unauthorized changes to any reports available within the application, even without proper permissions. The …

    BMC Control-M