Bmc
C
CAUTION
27
Total CVEs
7
Crit / High
5
Medium
15%
Unpatched
8%
Patched
7.0
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 1 patched ✗ 2 unpatched ~ 8 under review ⏳ 2 pending score
Intelligence by Audience
PoC Available
12 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"bmc" port:443
org:"Bmc" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
27
Critical severity
2
Actively exploited (CISA)
0
Unpatched ratio
15%
Avg CVSS score
7.0
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-12
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-12
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
Recent CVEs
showing 20 of 13
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-71260 PoC | 8.8 HIGH | PATCH UNDER REVIEW | 34.36% | 2026-03-19 |
| CVE-2025-71259 PoC | 4.3 MEDIUM | PATCH UNDER REVIEW | 12.92% | 2026-03-19 |
| CVE-2025-71258 PoC | 4.3 MEDIUM | PATCH UNDER REVIEW | 17.43% | 2026-03-19 |
| CVE-2025-71257 PoC | 7.3 HIGH | PATCH UNDER REVIEW | 44.58% | 2026-03-19 |
| CVE-2025-48709 | 4.8 MEDIUM | PATCH UNDER REVIEW | 0.13% | 2025-08-07 |
| CVE-2024-34398 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.12% | 2025-03-12 |
| CVE-2024-34399 PoC | ? N/A | UNKNOWN / UNPATCHED | 1.86% | 2024-09-18 |
| CVE-2021-35002 PoC | 8.8 HIGH | UNKNOWN / UNPATCHED | 7.18% | 2024-05-07 |
| CVE-2021-35001 PoC | 3.1 LOW | UNKNOWN / UNPATCHED | 0.48% | 2024-05-07 |
| CVE-2024-1606 PoC | 4.6 MEDIUM | PATCH UNDER REVIEW | 0.11% | 2024-03-18 |
| CVE-2024-1605 PoC | 6.6 MEDIUM | PATCH UNDER REVIEW | 0.03% | 2024-03-18 |
| CVE-2024-1604 PoC | 6.4 MEDIUM | PATCH UNDER REVIEW | 0.07% | 2024-03-18 |
| CVE-1999-0443 PoC | 10.0 CRITICAL | PATCHED / FIX AVAILABLE | 1.27% | 1999-04-01 |
Intel
HQHouston, Texas, USA
Founded1980
Employees6,000
CEOAyman Sayed
Trust ScoreC — CAUTION
Max CVSS10.0
Last Updated2026-07-12
Top Weaknesses
CWE-306
Missing Authentication
3 occurrences in Bmc CVEs
(11% of total)
CWE-79
Cross-Site Scripting (XSS)
2 occurrences in Bmc CVEs
(7% of total)
CWE-798
Use of Hard-coded Credentials
2 occurrences in Bmc CVEs
(7% of total)
CWE-918
Server-Side Request Forgery (SSRF)
2 occurrences in Bmc CVEs
(7% of total)
CWE-119
Buffer Overflow
1 occurrence in Bmc CVEs
(4% of total)
CWE-862 (Missing Authorization)
Unknown Weakness Type
1 occurrence in Bmc CVEs
(4% of total)
CWE-924
Unknown Weakness Type
1 occurrence in Bmc CVEs
(4% of total)
CWE-434
Unrestricted File Upload
1 occurrence in Bmc CVEs
(4% of total)
Company Profile
BMC Software is a global enterprise software company that provides IT management, automation, and cybersecurity solutions, including mainframe security, workload automation, and service management. Its products are critical for large enterprises managing hybrid IT environments, and its security relevance stems from vulnerabilities in its Control-M, Remedy, and mainframe security tools that could expose sensitive enterprise data.
Response Metrics
Est. MTTR ⓘ
~423 days
(Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -46% better
CVE count 2026 vs 2025:
13 → 7 CVEs
Patch Speed ⓘ Poor (>65% open)
15% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€464K
Est. GDPR High
€4.6M
Based on 2 critical CVEs, 0 CISA KEV, 74% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Bmc C valtersit.com