92 matches found
Sql injection
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
BMC Control-M SQL注入漏洞
BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. A security vulnerability exists in BMC Control-M versions prior to 9.0.20.214, which stems from the presence of a SQL injection vulnerability that can be exploited...
CVE-2023-26550
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
CVE-2023-26550
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field...
CVE-2023-26550
CVE-2023-26550 affects BMC Control-M prior to 9.0.20.214. The vulnerability is a SQL injection in the memname JSON field that allows an attacker to execute arbitrary SQL commands. The issue is documented with a high severity (CVSS v3.1: 9.8/CRITICAL, network vector, no user interaction, no privil...
Information Disclosure
file is vulnerable to information disclosure. The vulnerability exists as BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...
BMC Control-M/Agent Buffer Overflow Vulnerability
Control-M is one of BMC's most important automation control products, and is the world's leading integrated business scheduling solution for cross-platform and cross-application job scheduling. A buffer overflow vulnerability exists in BMC Control-M/Agent when the On-Do action destination is Mail...
BMC Control-M/Agent Command Injection Vulnerability
Control-M is one of BMC's most important automation control products, and is the world's leading integrated business scheduling solution for cross-platform and cross-application job scheduling. A security vulnerability exists in BMC Control-M/Agent when using the TCP protocol, which can be...
CVE-2019-19220
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...
CVE-2019-19217
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...
CVE-2019-19219
BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...
CVE-2019-19215
A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...
CVE-2019-19218
BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...
CVE-2019-19220
BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...
CVE-2019-19216
BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...
Arbitrary file deletion
BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...
Buffer overflow
A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server...
Design/Logic Flaw
BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...