B
Vendor security profile
bmc
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical1
CISA KEV0
Public exploit4
Patch rate%50
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
4
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
8toplam CVE
Critical1 (13%)
High2 (25%)
Medium5 (63%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%50
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
8.1
CVE-2026-16141
OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value
O
Patch status unknownEPSS %0
8.8
CVE-2026-16140
OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1
O
Patch status unknownEPSS %0
8.7
CVE-2025-71260
BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE
BS
Patch verifiedEPSS %34
5.3
CVE-2025-71259
BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS
BS
Patch verified Public Exploits:1EPSS %13
5.3
CVE-2025-71258
BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb
BS
Patch verified Public Exploits:1EPSS %17
6.9
CVE-2025-71257
BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass
BS
Patch verified Public Exploits:1EPSS %45
6.1
CVE-2017-17678
Cross-site scripting in Bmc Remedy Mid Tier
B
Patch status unknownEPSS %1
8.8
CVE-2017-17677
Incorrect permission assignment in Bmc Remedy Mid Tier
B
Patch status unknownEPSS %1
5.3
CVE-2017-17675
Vulnerability in Bmc Remedy Mid Tier
B
Patch status unknownEPSS %1
9.8
CVE-2017-17674
Server-side request forgery in Bmc Remedy Mid Tier
B
Patch status unknownEPSS %2