CVE-2025-71257: BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass
BMC Software, Inc. · FootPrints
Vendor fix available · Affected: BMC Software, Inc. FootPrints · Exploitation: check available, not yet exploited
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 98% of scored CVEs
DescriptionCVE.org
BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets. Unauthenticated remote attackers can bypass access controls to invoke restricted functionality and gain unauthorized access to application data and modify system resources. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- BMC Software, Inc. · FootPrintsfrom 20.20.02 up to and including 20.24.01.001
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
- CISA KEV
- Not listed
- Public check
- BMC FootPrints - Authentication Bypass · nuclei template in projectdiscovery/nuclei-templates
- Vendor
- BMC Software, Inc.
- Published
- March 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2025-71257 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.