CVE-2025-31975: fallo de gravedad baja en HCL BigFix Service Management (SM)
HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 2.6epss 0.2%
HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system details, potentially aiding attackers in targeting known vulnerabilities.
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Productos afectados
HCL · BigFix Service Management (SM)CVEs relacionadas — HCL BigFix Service Management (SM)
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-30151HIGHHCL BigFix Service Management (SM) is susceptible to Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-31960MEDIUMHCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting moduleEPSS 0.2%CVE-2025-52613MEDIUMHCL BigFix Service Management (SM) is affected by use of a vulnerable componentEPSS 0.2%CVE-2025-31973MEDIUMHCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'EPSS 0.2%CVE-2025-31985LOWHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerEPSS 0.2%CVE-2025-31984LOWHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” headerEPSS 0.1%