Control M/Agent
Approved changes feed: RSS · Atom
cpe:2.3:a:bmc:control-m/agent:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bmc (41db0501-28a3-55f2-9e02-2ebb9bfb3ab9) |
|---|---|
| Product | Control M/Agent (9c310b62-29c9-54b9-94b3-7bf70f24f7ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-55118 |
vulnerable | 2026-06-08 07:33:14.084473 |
BMC Control-M/Agent memory corruption in SSL/TLS communication
HIGH (8.9)
Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured.
The issue occurs in the following cases:
* Control-M/Agent 9.0.20: SSL/TLS configuration is set to the non-default setting "use_openssl=n";
* Control-M/Agent 9.0.21 and 9.0.22: Agent router configuration uses the non-default settings "JAVA_AR=N" and "use_openssl=n"
Published: 2025-09-16T12:23:39.683Z
Updated: 2025-11-18T12:32:45.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55117 |
vulnerable | 2026-06-08 07:33:14.083916 |
BMC Control-M/Agent buffer overflow in SSL/TLS communication
MEDIUM (5.3)
A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL/TLS communication is configured.
The issue occurs in the following cases:
* Control-M/Agent 9.0.20: SSL/TLS configuration is set to the non-default setting "use_openssl=n";
* Control-M/Agent 9.0.21 and 9.0.22: Agent router configuration uses the non-default settings "JAVA_AR=N" and "use_openssl=n".
Published: 2025-09-16T12:22:58.166Z
Updated: 2025-09-16T13:18:02.597Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55116 |
not_vulnerable | 2026-06-08 07:33:14.083583 |
BMC Control-M/Agent buffer overflow local privilege escalation
HIGH (8.8)
A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent.
This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions.
Published: 2025-09-16T12:22:23.865Z
Updated: 2026-02-26T17:48:31.380Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55115 |
not_vulnerable | 2026-06-08 07:33:14.083165 |
BMC Control-M/Agent path traversal local privilege escalation
HIGH (8.8)
A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions. This vulnerability was fixed in 9.0.20.100 and above.
Published: 2025-09-16T12:21:51.089Z
Updated: 2026-02-26T17:48:31.720Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55114 |
not_vulnerable | 2026-06-08 07:33:14.082884 |
BMC Control-M/Agent improper IP address filtering order
MEDIUM (5.3)
The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is validated only after the SSL/TLS handshake is completed, exposes the Control-M/Agent to vulnerabilities in the SSL/TLS implementation under certain non-default conditions (e.g. CVE-2025-55117 or CVE-2025-55118) or potentially to resource exhaustion.
Published: 2025-09-16T12:20:30.958Z
Updated: 2025-09-16T13:17:35.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55113 |
vulnerable | 2026-06-08 07:33:14.082582 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55112 |
not_vulnerable | 2026-06-08 07:33:14.081930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55111 |
not_vulnerable | 2026-06-08 07:33:14.081379 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55110 |
vulnerable | 2026-06-08 07:33:14.080951 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55109 |
not_vulnerable | 2026-06-08 07:33:14.079643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55108 |
vulnerable | 2026-06-08 07:33:14.079246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.