Control M/Enterprise Manager

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bmc:control-m/enterprise_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBmc (41db0501-28a3-55f2-9e02-2ebb9bfb3ab9)
ProductControl M/Enterprise Manager (c7450535-f214-5445-add7-b87cbe1a473b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-10540 not_vulnerable 2026-07-29 00:23:29.574785 Weak password hash protection in Control-M/Entreprise Manager
MEDIUM (5.6)
The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker. This vulnerability affects Control-M/Enterprise Manager unsupported versions 9.0.20.x and potentially earlier unsupported versions
Published: 2026-07-01T07:52:10.618Z
Updated: 2026-07-01T12:34:11.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10538 not_vulnerable 2026-07-29 00:23:29.572019 Improper deserialization handling in Control-M Components
HIGH (8)
Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Control-M/Server and Control-M/Enterprise Manager versions 9.0.20.x and potentially earlier. This issue may allow an authenticated attacker to trigger unintended server-side behavior through crafted serialized content.
Published: 2026-07-01T07:56:31.099Z
Updated: 2026-07-01T12:24:04.644Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.