Bmc

Control-m/managed File Transfer

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-23780

  • EPSS 0.4%
  • Veröffentlicht 10.04.2026 00:00:00
  • Zuletzt bearbeitet 27.04.2026 19:11:56

An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A SQL injection vulnerability in the MFT API's debug interface allows an authenticated attacker to inject malicious queries due to improper input validation and unsafe dynamic SQL ha...

7.5

CVE-2026-23782

  • EPSS 0.27%
  • Veröffentlicht 10.04.2026 00:00:00
  • Zuletzt bearbeitet 27.04.2026 19:11:46

An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. An API management endpoint allows unauthenticated users to obtain both an API identifier and its corresponding secret value. With these exposed secrets, an attacker could invoke priv...

9.8

CVE-2026-23781

  • EPSS 0.28%
  • Veröffentlicht 10.04.2026 00:00:00
  • Zuletzt bearbeitet 27.04.2026 19:11:38

An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22. A set of default debug user credentials is hardcoded in cleartext within the application package. If left unchanged, these credentials can be easily obtained and may allow unauthoriz...