Filtered by vendor Bmc Subscriptions
Filtered by product Control-m/enterprise Manager Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-10537 1 Bmc 2 Control-m/enterprise Manager, Control-m/server 2026-10-27 5.3 Medium
A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure or affect service availability. This vulnerability affects : * Control-M/Enterprise Manager versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions. * Control-M/Server versions 9.0.20 to 9.0.22 (excluded) and potentially earlier unsupported versions
CVE-2026-10538 1 Bmc 2 Control-m/enterprise Manager, Control-m/server 2026-07-01 8 High
Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Control-M/Server and Control-M/Enterprise Manager versions 9.0.20.x and potentially earlier. This issue may allow an authenticated attacker to trigger unintended server-side behavior through crafted serialized content.
CVE-2026-10540 1 Bmc 1 Control-m/enterprise Manager 2026-07-01 5.6 Medium
The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentially earlier unsupported versions