What’s Vulnerable › Products

BMC Control-M/Agent vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your BMC Control-M/Agent version is affected

Latest BMC Control-M/Agent vulnerabilities

• CVE-2025-55108 — BMC Control-M/Agent default configuration does not enforce SSL/TLS allowing unauthorized actions and remote code execution (CVSS 10.0)
• CVE-2025-55118 — BMC Control-M/Agent memory corruption in SSL/TLS communication (CVSS 8.9)
• CVE-2025-55117 — BMC Control-M/Agent buffer overflow in SSL/TLS communication (CVSS 5.3)
• CVE-2025-55116 — BMC Control-M/Agent buffer overflow local privilege escalation (CVSS 8.8)
• CVE-2025-55115 — BMC Control-M/Agent path traversal local privilege escalation (CVSS 8.8)
• CVE-2025-55114 — BMC Control-M/Agent improper IP address filtering order (CVSS 5.3)
• CVE-2025-55113 — BMC Control-M/Agent unescaped NULL byte in access control list checks (CVSS 10.0)
• CVE-2025-55112 — BMC Control-M/Agent hardcoded Blowfish keys (CVSS 7.4)
• CVE-2025-55111 — BMC Control-M/Agent insecure default file permissions (CVSS 5.5)
• CVE-2025-55110 — BMC Control-M/Agent hardcoded default keystore password (CVSS 5.5)
• CVE-2025-55109 — BMC Control-M/Agent default SSL/TLS configuration authenticated bypass (CVSS 9.0)