Control M/Agent
Approved changes feed: RSS · Atom
cpe:2.3:a:bmc:control-m\/agent:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bmc (41db0501-28a3-55f2-9e02-2ebb9bfb3ab9) |
|---|---|
| Product | Control M/Agent (9c310b62-29c9-54b9-94b3-7bf70f24f7ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-55117 |
vulnerable | 2026-06-08 07:33:14.084036 |
BMC Control-M/Agent buffer overflow in SSL/TLS communication
MEDIUM (5.3)
A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL/TLS communication is configured.
The issue occurs in the following cases:
* Control-M/Agent 9.0.20: SSL/TLS configuration is set to the non-default setting "use_openssl=n";
* Control-M/Agent 9.0.21 and 9.0.22: Agent router configuration uses the non-default settings "JAVA_AR=N" and "use_openssl=n".
Published: 2025-09-16T12:22:58.166Z
Updated: 2025-09-16T13:18:02.597Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55116 |
vulnerable | 2026-06-08 07:33:14.083620 |
BMC Control-M/Agent buffer overflow local privilege escalation
HIGH (8.8)
A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent.
This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions.
Published: 2025-09-16T12:22:23.865Z
Updated: 2026-02-26T17:48:31.380Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55115 |
vulnerable | 2026-06-08 07:33:14.083191 |
BMC Control-M/Agent path traversal local privilege escalation
HIGH (8.8)
A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions. This vulnerability was fixed in 9.0.20.100 and above.
Published: 2025-09-16T12:21:51.089Z
Updated: 2026-02-26T17:48:31.720Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55113 |
vulnerable | 2026-06-08 07:33:14.082614 |
BMC Control-M/Agent unescaped NULL byte in access control list checks
CRITICAL (9)
If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions; non-default but configurable using the JAVA_AR setting in newer versions), the verification stops at the first NULL byte encountered in the email address referenced in the client certificate. An attacker could bypass configured ACLs by using a specially crafted certificate.
Published: 2025-09-16T12:20:03.820Z
Updated: 2026-02-26T17:48:31.863Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55112 |
vulnerable | 2026-06-08 07:33:14.082062 |
BMC Control-M/Agent hardcoded Blowfish keys
HIGH (7.4)
Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm use a hardcoded key. An attacker with access to network traffic and to this key could decrypt network traffic between the Control-M/Agent and Server.
Published: 2025-09-16T12:19:24.308Z
Updated: 2026-02-26T17:48:32.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55111 |
vulnerable | 2026-06-08 07:33:14.081417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55109 |
vulnerable | 2026-06-08 07:33:14.080582 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.