5.3
Medium
CVE-2025-31977 HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with…
Description
HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Service Management (SM) | 23 | No fix stated |
Other CVEs of BigFix Service Management (SM)
The 9 CVEs of BigFix Service Management (SM) →
CVE-2025-31974
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only
3.9
Low
CVE-2025-31976
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while…
4.8
Medium
CVE-2025-31978
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX)…
4.6
Medium
CVE-2025-31959
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images
3.5
Low