CVE-2025-31981: medium-severity vulnerability in HCLSoftware BigFix Service Management (SM)
HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.1%
HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access. An attacker with access to the network traffic can sniff packets from the connection and uncover the data.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
HCLSoftware · BigFix Service Management (SM)Related CVEs — HCLSoftware BigFix Service Management (SM)
In the same product, most dangerous first.