Skip to content
CVSS 3.7 · LOW

CVE-2025-31982

HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.

View on NVD

Severity

Score: 3.7(LOW)
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
AV: NETWORK
AC: HIGH
PR: LOW
UI: REQUIRED
S: UNCHANGED
C: LOW
I: NONE
A: LOW
Weakness (CWE): CWE-200

EPSS

No EPSS score yet (CVE may be too fresh).

Affects

hcltech:bigfix_service_management

Technical description

HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.

Published: 5/6/2026, 3:16:06 PM
Last modified: 5/6/2026, 11:16:36 PM

References

HomeEventsBlogResourcesTeam