Bmc

Track-it!

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2022-35864

  • EPSS 1.22%
  • Veröffentlicht 03.08.2022 16:15:08
  • Zuletzt bearbeitet 21.11.2024 07:11:50

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetail...

9.8

CVE-2022-35865

  • EPSS 18.09%
  • Veröffentlicht 03.08.2022 16:15:08
  • Zuletzt bearbeitet 21.11.2024 07:11:50

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP reque...

9.8

CVE-2022-24047

  • EPSS 2.35%
  • Veröffentlicht 18.02.2022 20:15:17
  • Zuletzt bearbeitet 21.11.2024 06:49:43

This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP reque...

10

CVE-2016-6598

Exploit
  • EPSS 36.87%
  • Veröffentlicht 30.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 02:56:24

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-...

9.8

CVE-2016-6599

Exploit
  • EPSS 33.37%
  • Veröffentlicht 30.01.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 02:56:24

BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. This service contains a method that can be used to retrieve a configuration file that contains the application data...