CVE-2025-31980: HCL BigFix Service Management is affected by multiple security vulnerabilities.
Published Oct 1, 2026
·Updated
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.
Affected Software
1 affected component
HCL BigFix Service Management
Event History
Oct 1, 2026
CVE Published
via MITRE·04:17 PM
Data Sourced
via MITRE·04:17 PM
DescriptionSeverity
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
The CVSS vector indicates that exploitation can be performed over the network with low attack complexity and requires no privileges. User interaction is required.
2
What is the documented security impact?
The listed impact is limited to integrity, with no documented confidentiality or availability impact. The issue may allow unvalidated or malformed data to be injected, potentially causing injection attacks or downstream processing errors.