VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 31, 2023· Updated Jun 17, 2026

CVE-2023-39122

CVE-2023-39122

Description

BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 (and is also fixed by a patch for 9.0.20.200).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.