Skip to content
CVSS 3.7 · LOW

CVE-2025-31983

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information.

View on NVD

Severity

Score: 3.7(LOW)
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
AV: NETWORK
AC: HIGH
PR: LOW
UI: REQUIRED
S: UNCHANGED
C: LOW
I: NONE
A: LOW
Weakness (CWE): CWE-358

EPSS

No EPSS score yet (CVE may be too fresh).

Affects

hcltech:bigfix_service_management

Technical description

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information.

Published: 5/6/2026, 3:16:07 PM
Last modified: 5/6/2026, 11:17:39 PM

References

HomeEventsBlogResourcesTeam