THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-71260 (HIGH 8.8) — BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the V

[NVD] CVE-2025-71260 (HIGH 8.8) — BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the V

lownvdPublished 2026-03-19

CVE-2025-71260 CVSS: 8.8 HIGH Published: 2026-03-19T14:16:13.583

BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the VIEWSTATE parameter to achieve remote code execution an

Indicators of compromise

CVE-2025-71260cve
20.24.01.001ipv4
20.20.03.002ipv4
20.21.01.001ipv4
20.21.02.002ipv4
20.22.01.001ipv4
20.23.01.002ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-71260