2.6
Low
CVE-2025-31957 HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability
Description
HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Service Management (SM) | 23 | No fix stated |
Other CVEs of BigFix Service Management (SM)
The 9 CVEs of BigFix Service Management (SM) →
CVE-2025-31974
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only
3.9
Low
CVE-2025-31976
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while…
4.8
Medium
CVE-2025-31978
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX)…
4.6
Medium
CVE-2025-31959
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images
3.5
Low