CVE-2025-31982: falha de baixa gravidade em HCL Software BigFix Service Management (SM)
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.7epss 0.2%
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
Produtos afetados
HCL Software · BigFix Service Management (SM)CVEs relacionadas — HCL Software BigFix Service Management (SM)
No mesmo produto, das mais perigosas para as menos.
CVE-2025-31979MEDIUMA File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)EPSS 0.2%CVE-2025-31974LOWHCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-OnlyEPSS 0.2%CVE-2025-31976MEDIUMHCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentialsEPSS 0.2%CVE-2025-31959LOWHCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.EPSS 0.1%CVE-2025-31978MEDIUMHCL BigFix Service Management (SM) does not adequately sanitize or safely renderEPSS 0.1%CVE-2025-31977MEDIUMA cryptographic weakness has been identified in the HCL BigFix Service Management (SM)EPSS 0.1%