Aggregates CVE and security vulnerability intelligence across all bmcsoftware-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk buffer overflow and vendor risk command injection and related problems; some flaws may lead to vendor impact application crash and vendor impact memory corruption.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2019-19220 | BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2). | [email protected] | 8.8 | 1.81% | 2020-04-30 | 2026-06-16 |
| CVE-2019-19219 | BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download. | [email protected] | 7.5 | 1.05% | 2020-04-30 | 2026-06-16 |
| CVE-2019-19218 | BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage. | [email protected] | 7.5 | 1.00% | 2020-04-30 | 2026-06-16 |
| CVE-2019-19217 | BMC Control-M/Agent 7.0.00.000 allows OS Command Injection. | [email protected] | 8.8 | 1.81% | 2020-04-30 | 2026-06-16 |
| CVE-2019-19216 | BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy. | [email protected] | 8.8 | 1.06% | 2020-04-30 | 2026-06-16 |
| CVE-2019-19215 | A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server. | [email protected] | 8.8 | 1.60% | 2020-04-30 | 2026-06-16 |