FootPrints vulnerabilities

4 known vulnerabilities in FootPrints from BMC Software. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  FootPrints: Deserialization of Untrusted Data

  CVE-2025-71260Mar 19, 2026BMC SoftwareEPSS 34.1%

  BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted seriali

• 7.1 High severity

  FootPrints: Server-Side Request Forgery

  CVE-2025-71259Mar 19, 2026BMC SoftwareEPSS 12.5%

  BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticated attackers to trigger arbitrary outbound requests from the server. Attackers can

• 7.1 High severity

  FootPrints: Server-Side Request Forgery

  CVE-2025-71258Mar 19, 2026BMC SoftwareEPSS 16.9%

  BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackers to cause the server to initiate arbitrary outbound requests. Attackers can e

• 9.1 Critical severity

  FootPrints: Missing Authentication for Critical Functionality

  CVE-2025-71257Mar 19, 2026BMC SoftwareEPSS 44.2%

  BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets. Unauthenticated remote attackers can bypass access controls