Vulnerability CVE-2023-26550


Published: 2023-02-25

Description:
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON field.

 References:
https://www.synacktiv.com/sites/default/files/2023-02/Synacktiv-ControlM-Multiple-Vulnerabilities.pdf

Copyright 2026, cxsecurity.com

 

Back to Top