CVE-2025-71257Proof of concept (PoC) published · CISASuited to automated attack · CISA
BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass
CVSS score
6.9
EPSS probability
%44.6
Risk score
3.1
Published
7 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
No verified news item has been matched to this CVE yet.
Similar Vulnerabilities
8.7
CVE-2025-71260BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE
Patch verifiedEPSS %34
5.3
CVE-2025-71258BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb
Patch verified Public Exploits:1EPSS %17
5.3
CVE-2025-71259BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS
Patch verified Public Exploits:1EPSS %13
9.8
CVE-2017-17674Server-side request forgery in Bmc Remedy Mid Tier
Patch status unknownEPSS %2
8.8
CVE-2017-17677Incorrect permission assignment in Bmc Remedy Mid Tier
Patch status unknownEPSS %1
5.3
CVE-2017-17675Vulnerability in Bmc Remedy Mid Tier
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-71257"