CVE-2025-31983: Hcltech Bigfix Service Management

Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days.

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information.

Affected products

• Hcltech Bigfix Service Management: version 23.0 only

Published 2026-05-06. Last modified 2026-10-07.