Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

bmc server automation vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2016-1542
The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote malicious users to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.
Bmc Bladelogic Server Automation Console 8.3.02Bmc Bladelogic Server Automation Console 8.7.00Bmc Bladelogic Server Automation Console 8.3.00Bmc Bladelogic Server Automation Console 8.2.02Bmc Bladelogic Server Automation Console 8.6.00Bmc Bladelogic Server Automation Console 8.5.01Bmc Bladelogic Server Automation Console 8.2.03Bmc Bladelogic Server Automation Console 8.3.01Bmc Bladelogic Server Automation Console 8.2.04Bmc Bladelogic Server Automation Console 8.5.00Bmc Bladelogic Server Automation Console 8.3.03
5
CVSSv2
CVE-2016-1543
The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote malicious users to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization fa...
Bmc Bladelogic Server Automation Console 8.6.00Bmc Bladelogic Server Automation Console 8.5.01Bmc Bladelogic Server Automation Console 8.2.04Bmc Bladelogic Server Automation Console 8.2.03Bmc Bladelogic Server Automation Console 8.5.00Bmc Bladelogic Server Automation Console 8.3.03Bmc Bladelogic Server Automation Console 8.3.02Bmc Bladelogic Server Automation Console 8.3.01Bmc Bladelogic Server Automation Console 8.7.00Bmc Bladelogic Server Automation Console 8.3.00Bmc Bladelogic Server Automation Console 8.2.02
NA
CVE-2017-9453
BMC Server Automation prior to 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass.
Bmc Server Automation
5
CVSSv2
CVE-2016-5063
The RSCD agent in BMC Server Automation prior to 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote malicious users to bypass authorization checks and make an RPC call via unspecified vectors.
Bmc Server Automation
7.5
CVSSv2
CVE-2016-4322
BMC BladeLogic Server Automation (BSA) prior to 8.7 Patch 3 allows remote malicious users to bypass authentication and consequently read arbitrary files or possibly have unspecified other impact by leveraging a "logic flaw" in the authentication process.
Bmc Bladelogic Server Automation Console 8.7.00
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook