/Vulnerability Library

BMC FootPrints 'feedUrl' - Server-Side Request Forgery

CVE-2025-71259
Verified

Description

BMC FootPrints versions 20.20.02 through 20.24.01.001 contain a Server-Side Request Forgery (SSRF) vulnerability in the /footprints/servicedesk/externalfeed/RSS endpoint. The 'feedUrl' parameter allows unauthenticated attackers to force the server to make HTTP requests to arbitrary URLs, enabling access to internal services and bypassing firewall restrictions. This vulnerability is part of a pre-authenticated RCE chain when combined with CVE-2025-71257 (auth bypass) and CVE-2025-71260 (deserialization).

Severity

High

CVSS Score

8.6

Exploit Probability

13%

Affected Product

footprints

Published Date

March 18, 2026

Template Author

watchtowr, dhiyaneshdk

CVE-2025-71259.yaml
8.6Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVE ID:
cve-2025-71259
CWE ID:
cwe-918

References

https://labs.watchtowr.com/thanks-itsms-threat-actors-have-never-been-so-organized-bmc-footprints-pre-auth-remote-code-execution-chains/https://docs.bmc.com/xwiki/bin/view/More-Products/Footprints/FootPrints/fp2024/https://nvd.nist.gov/vuln/detail/CVE-2025-71259

Remediation Steps

Apply the hotfixes released by BMC on September 2, 2025 for all affected branches. Update to the latest patched version of BMC FootPrints.