Bmc Remedy Smart Reporting vulnerabilities

2 CVEs affecting Bmc Remedy Smart Reporting, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11216, published 2019-12-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-11216, published 2019-12-04. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. BMC Smart Reporting 7.3 20180418 allows authenticated XXE within the import functionality. One can import a malicious XML file and perform XXE attacks to download local files from the server, or do…
CVE-2019-1010147, published 2019-07-26. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. Yellowfin Smart Reporting All Versions Prior to 7.3 is affected by: Incorrect Access Control - Privileges Escalation. The impact is: Victim attacked and access admin functionality through their…