CVE-2016-2349

HIGH 7.5CVE-2016-2349 · Published 21/12/2016 · updated 17/06/2026

In short

CVE-2016-2349 is a HIGH (CVSS 7.5) vulnerability affecting remedy action request system (bmc).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
remedy action request system bmc	`= 8.1= 9.0= 9.1`	No fix yet

Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords via a blank previous password.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 8.1= 9.0= 9.1

No fix yet

More vulnerabilities in remedy action request system

See all →