What’s Vulnerable › Vulnerabilities

CVE-2016-2349

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-12-21 · updated 2026-06-17
• Weakness: CWE-640

Description

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password.

Affected products

• BMC Remedy Action Request System: 8.1-sp2, 9.0, 9.0-sp1, 9.1

References

• http://www.securityfocus.com/bid/95075
• http://www.securitytracker.com/id/1037529
• https://bmcsites.force.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000l6kbCAA&type=Solution
• http://www.securityfocus.com/bid/95075
• http://www.securitytracker.com/id/1037529
• https://bmcsites.force.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000l6kbCAA&type=Solution

Get alerted when CVE-2016-2349 or the next vulnerability affects your stack