CVE-2025-31983

Summary

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information.

Affected Software

VendorProductVersion RangeStatus
HCLBigFix Service Management (SM)23affected

Weaknesses

  • CWE-358: CWE-358: Improperly Implemented Security Check for Standard

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References