Track It

Vendor:

First CVE: Oct 10, 2014 · Active for 11 years

11

Total CVEs

More Total CVEs than 89% of tracked products

2.8

Avg CVEs / Year

Higher CVE frequency than 75% of tracked products

7.6

Avg CVSS

Higher Avg CVSS than 61% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Track It over time

Volume of CVEsAvg CVSS Base Score

First CVE

Oct 10, 2014

11 years ago

Most Recent CVE

May 7, 2024

808 days ago

CVE Severity & Scoring

Track It11 CVEs

45%

18%

36%

All CVEs352,231 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local0 (0.0%)

Network7 (63.6%)

Unknown4 (36.4%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low7 (63.6%)

High0 (0.0%)

Unknown4 (36.4%)

User Interaction

None7 (63.6%)

Unknown4 (36.4%)

Required0 (0.0%)

Privileges Required

Low3 (27.3%)

High0 (0.0%)

None4 (36.4%)

Unknown4 (36.4%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2014-4872HIGH BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive cred	Oct 10, 2014	7.5	83	NO	YES
CVE-2016-6598CRITICAL BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a method that allows uploa	Jan 30, 2018	9.8	51	NO	YES
CVE-2016-6599CRITICAL BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. This service contains a method that can be us	Jan 30, 2018	9.8	49	NO	YES
CVE-2022-35865CRITICAL This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerab	Aug 3, 2022	9.8	31	NO	NO
CVE-2014-8270MEDIUM BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a	Dec 12, 2014	5.0	31	NO	YES
CVE-2014-4873MEDIUM SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data.	Oct 10, 2014	6.5	31	NO	YES
CVE-2022-24047CRITICAL This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerab	Feb 18, 2022	9.8	29	NO	NO
CVE-2014-4874MEDIUM BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment page.	Oct 10, 2014	4.0	29	NO	YES
CVE-2021-35002HIGH BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Tr	May 7, 2024	8.8	24	NO	NO
CVE-2022-35864MEDIUM This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vul	Aug 3, 2022	6.5	22	NO	NO

View all 11 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

2 CVEs

18.2% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

5 CVEs

45.5% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Track It

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
20.21.02	2	8.2	1.4%	0
20.21.01.102	1	9.8	1.9%	0
20.21.01	4	7.9	1.3%	0
20.20.03	4	7.9	1.3%	0
20.20.02	4	7.9	1.3%	0
20.20.01	4	7.9	1.3%	0
20.19.03	4	7.9	1.3%	0
20.19.02	2	7.7	1.2%	0
20.19.01	2	7.7	1.2%	0
11.4	2	9.8	15.8%	2
11.3.0.355	3	6.0	30.2%	3
11.3	1	5.0	20.1%	1