Track-it!
This hub aggregates every CVE we track for Track-it!, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
11
CVEs tracked
4
Critical
2
High
0
In CISA KEV
Severity distribution
MEDIUM5CRITICAL4HIGH2
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
2024-102026-09
Latest CVEs
The 11 most recently published vulnerabilities affecting Track-it!.
- CVE-2021-35002BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability8.8
- CVE-2021-35001BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability6.5
- CVE-2022-35865This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specif...9.8
- CVE-2022-35864This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The s...6.5
- CVE-2022-24047This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specif...9.8
- CVE-2016-6598BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a method that allows uploading a file to an...9.8
- CVE-2016-6599BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. This service contains a method that can be used to retrieve a ...9.8
- CVE-2014-8270BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset.5.0
- CVE-2014-4874BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment page.4.0
- CVE-2014-4873SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data.6.5
- CVE-2014-4872BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and config...7.5
Product normalization is registry-driven with AI assist and human review. How it works