Is CVE-2025-71257 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-71257 being exploited in the wild.

How severe is CVE-2025-71257?

High severity, with a CVSS score of 7.3, published 19 March 2026.

Which products and versions are affected?

Bmc FootPrints ITSM 20.20.02 through 20.24.01.001.

Is there a fix for CVE-2025-71257?

A patch was published on 2025-09-02: BMC releases hotfixes for affected versions Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-71257 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2025-71257?

Check whether you run Bmc Footprints or Bmc FootPrints ITSM at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-71257: BMC FootPrints ITSM authentication bypass in REST API

CVE-2025-71257 · Severity: high · CVSS 7.3 · Published 2026-03-19

BMC FootPrints is an IT Service Management platform used by organizations to manage service requests, incidents, and assets. An authentication bypass vulnerability allows unauthenticated remote attackers to invoke restricted functionality, access sensitive application data, and modify system resources without credentials—potentially enabling unauthorized ticket manipulation, configuration changes, and data theft from a centralized IT management system.

Technologies: Bmc Footprints, Bmc FootPrints ITSM. Vendors: Bmc.

Quick answers

Is CVE-2025-71257 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-71257 being exploited in the wild.
How severe is CVE-2025-71257?: High severity, with a CVSS score of 7.3, published 19 March 2026.
Which products and versions are affected?: Bmc FootPrints ITSM 20.20.02 through 20.24.01.001.
Is there a fix for CVE-2025-71257?: A patch was published on 2025-09-02: BMC releases hotfixes for affected versions Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-71257 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2025-71257?: Check whether you run Bmc Footprints or Bmc FootPrints ITSM at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability stems from improper enforcement of security filters on restricted REST API endpoints and servlets in BMC FootPrints versions 20.20.02 through 20.24.01.001. The root cause is inadequate access control validation, allowing unauthenticated remote attackers to bypass authentication mechanisms over the network. An attacker can invoke restricted API endpoints to read sensitive data, modify system resources, and chain this vulnerability with other flaws (such as deserialization issues) to achieve pre-authenticated remote code execution. BMC has released hotfixes for versions 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.

Affected products

BMC FootPrints ITSM 20.20.02 through 20.24.01.001

Timeline

2026-03-02: disclosed: CVE assigned
2026-03-18: disclosed: watchTowr Labs research published
2025-06-06: other: watchTowr discloses vulnerability to BMC
2025-09-02: patched: BMC releases hotfixes for affected versions

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.