CVE-2025-31975: Hcltech Bigfix Service Management

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system details, potentially aiding attackers in targeting known vulnerabilities.

Affected products

• Hcltech Bigfix Service Management: version 23.0 only

Published 2026-05-06. Last modified 2026-10-07.