DeutschShown in its original language — a full translation is planned for a future version.
HCL BigFix Service Management: Mehrere Schwachstellen
view advisory published 2026-05-06
Ein Angreifer kann mehrere Schwachstellen in HCL BigFix Service Management ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-31985US | medium6.5 | — | ||
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MI… | ||||
| CVE-2025-31973US | critical9.8 | — | ||
HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabili… | ||||
| CVE-2025-31974US | high7.2OT elevated | — | ||
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow
unintended modifications to c… | ||||
| CVE-2025-31960US | — | — | ||
HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or ou… | ||||
| CVE-2025-52613US | high8.8 | — | ||
HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the application to known… | ||||
| CVE-2025-31984US | medium5.4 | — | ||
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MI… | ||||
| CVE-2025-31983US | medium4.6 | — | ||
HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing th… | ||||
| CVE-2025-31982US | medium6.5 | — | ||
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclo… | ||||
| CVE-2025-31978US | medium4.3 | — | ||
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could popula… | ||||
| CVE-2025-31976US | high7.5 | — | ||
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could a… | ||||
| CVE-2025-31975US | medium5.3 | — | ||
HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system det… | ||||
| CVE-2025-31959US | — | — | ||
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location inform… | ||||
| CVE-2025-31957US | medium5.7 | — | ||
HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data. | ||||
| CVE-2025-4287US | — | — | ||
A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function torch.cuda.nccl.reduce of the file torch/cuda/nccl.py. Th… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan