WID-SEC-W-2025-2324

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

HCL BigFix Modern Client Management (MCM) and BigFix Mobile: Mehrere Schwachstellen ermöglichen Darstellen falscher Informationen

view advisory published 2025-10-15

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix Modern Client Management (MCM) and BigFix Mobile ausnutzen, um falsche Informationen darzustellen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-0277USmedium6.1—
HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by…
CVE-2025-0276USmedium6.1—
HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users int…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan