CVE-2025-71259
MEDIUM NUCLEIBMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS
Title source: cnaExploitation Summary
CVE-2025-71259 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows authenticated attackers to trigger arbitrary outbound requests from the server. Attackers can exploit insufficient validation of externally supplied resource references to interact with internal services or cause resource exhaustion impacting availability. The following hotfixes remediate the vulnerability: 20.20.02, 20.20.03.002, 20.21.01.001, 20.21.02.002, 20.22.01, 20.22.01.001, 20.23.01, 20.23.01.002, and 20.24.01.
Nuclei Templates (1)
BMC FootPrints 'feedUrl' - Server-Side Request Forgery
HIGHVERIFIEDby watchTowr,DhiyaneshDk
Shodan:
html:"/footprints/servicedesk/"
FOFA:
body="/footprints/servicedesk/"
References (3)
Core 3
Core References
Exploit technical-description
exploit
https://labs.watchtowr.com/thanks-itsms-threat-actors-have-never-been-so-organized-bmc-footprints-pre-auth-remote-code-execution-chains/
Third Party Advisory third-party-advisory
https://www.vulncheck.com/advisories/bmc-footprints-itsm-blind-ssrf-in-externalfeed-rss
Scores
CVSS v3
4.3
EPSS
0.0283
EPSS Percentile
86.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-918
Status
published
Products (2)
bmc/footprints_itsm
20.20.02 - 20.24.01.001
BMC Software, Inc./FootPrints
20.20.02 - 20.24.01.001
Published
Mar 19, 2026
Tracked Since
Mar 19, 2026