Bmcsoftware Security Vulnerabilities

CVE-2019-19215

A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server.

CVE-2019-19216

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy.

CVE-2019-19217

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection.

CVE-2019-19218

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage.

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download.

CVE-2019-19220

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2).