BMC Control-M/Agent vulnerabilities

Newest CVEs

• CVE-2025-55108

  BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution

  BMC · Control-M/Agent

  Critical9.5
• CVE-2025-55118

  BMC Control-M/Agent memory corruption in SSL/TLS communication

  BMC · Control-M/Agent

  High8.4
• CVE-2025-55117

  BMC Control-M/Agent buffer overflow in SSL/TLS communication

  BMC · Control-M/Agent

  Medium6.3
• CVE-2025-55116

  BMC Control-M/Agent buffer overflow local privilege escalation

  BMC · Control-M/Agent

  Critical9.3
• CVE-2025-55115

  BMC Control-M/Agent path traversal local privilege escalation

  BMC · Control-M/Agent

  Critical9.3
• CVE-2025-55114

  BMC Control-M/Agent improper IP address filtering order

  BMC · Control-M/Agent

  Medium6.9
• CVE-2025-55113

  BMC Control-M/Agent unescaped NULL byte in access control list checks

  BMC · Control-M/Agent

  Critical9.5
• CVE-2025-55112

  BMC Control-M/Agent hardcoded Blowfish keys

  BMC · Control-M/Agent

  High7.6
• CVE-2025-55111

  BMC Control-M/Agent insecure default file permissions

  BMC · Control-M/Agent

  Medium5.7
• CVE-2025-55110

  BMC Control-M/Agent hardcoded default keystore password

  BMC · Control-M/Agent

  Medium5.7