Skip to content
Sign in
6.5 Medium

CVE-2025-0277 HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP)

Description

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.

Affected products and versions

Product Affected versions Fixed in
BigFix Mobile 3.3 earliest → 3.3 No fix stated

Other CVEs of BigFix Mobile

The 3 CVEs of BigFix Mobile →
CVE-2025-0275 HCL BigFix Mobile 3.3 and earlier is affected by improper access control 5.3 Medium CVE-2021-27782 HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced 5.4 Medium
Track this CVE