CVE-2025-71257 Scanner
CVE-2025-71257 Scanner - Authentication Bypass vulnerability in BMC FootPrints
Used 3k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-71257
6.9
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted REST API endpoints and servlets. Unauthenticated remote attackers can bypass access controls to invoke restricted functionality and gain unauthorized access to application data and modify system resources. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
footprints
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: footprints
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →