Veille CVE

Recherche « BMC Control-M/Enterprise Manager »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « BMC Control-M/Enterprise Manager » ✕
  1. CVE-2026-10540 5.6 Moyenne

    BMC Control-M/Enterprise Manager

    The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentially earlier unsupported versions

  2. CVE-2026-10538 8.0 Élevée

    BMC Control-M/Enterprise Manager · BMC Control-M/Server

    Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Control-M/Server and Control-M/Enterprise Manager versions 9.0.20.x and potentially earlier. This issue may allow an authenticated attacker to trigger unintended server-side behavior through crafted serialized content.