6.5
Medium
CVE-2025-31972 HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS…
Description
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Service Management (SM) | 23 | No fix stated |
Other CVEs of BigFix Service Management (SM)
The 9 CVEs of BigFix Service Management (SM) →
CVE-2025-31974
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only
3.9
Low
CVE-2025-31976
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while…
4.8
Medium
CVE-2025-31978
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX)…
4.6
Medium
CVE-2025-31959
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images
3.5
Low