| Package | Affected versions | Patched versions |
|---|---|---|
| control-m | < 9.0.21 | 9.0.21 |
BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 (and is also fixed by a patch for 9.0.20.200).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free