| CVE-2025-31974 |
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only
|
3.9
Low
|
May 6, 2026 |
| CVE-2025-31976 |
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while…
|
4.8
Medium
|
May 6, 2026 |
| CVE-2025-31978 |
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX)…
|
4.6
Medium
|
May 6, 2026 |
| CVE-2025-31959 |
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images
|
3.5
Low
|
May 6, 2026 |
| CVE-2025-31982 |
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed…
|
3.7
Low
|
May 6, 2026 |
| CVE-2025-31957 |
HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability
|
2.6
Low
|
May 6, 2026 |
| CVE-2025-31979 |
A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to…
|
5.4
Medium
|
Aug 28, 2025 |
| CVE-2025-31977 |
HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with…
|
5.3
Medium
|
Aug 28, 2025 |
| CVE-2025-31972 |
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS…
|
6.5
Medium
|
Aug 28, 2025 |