Veille CVE

Recherche « HCL Software BigFix Service Management (SM) »

7 CVE

Critique 0 Élevée 2 Moyenne 4 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « HCL Software BigFix Service Management (SM) » ✕
  1. CVE-2025-31974 7.2 Élevée

    HCL Software BigFix Service Management (SM) · Hcltech bigfix service management

    HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow unintended modifications to critical system components, potentially increasing the risk of system compromise or unauthorized changes.

  2. CVE-2025-31982 6.5 Moyenne

    HCL Software BigFix Service Management (SM) · Hcltech bigfix service management

    HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.

  3. CVE-2025-31978 4.3 Moyenne

    HCL Software BigFix Service Management (SM) · Hcltech bigfix service management

    HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could populate data fields which, when saved to a CSV file, may attempt information exfiltration or other malicious activity when automatically executed by the spreadsheet software. Note that current versions of Excel warn users of untrusted content.

  4. CVE-2025-31976 7.5 Élevée

    HCL Software BigFix Service Management (SM) · Hcltech bigfix service management

    HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .

  5. CVE-2025-31975 5.3 Moyenne

    HCL BigFix Service Management (SM) · Hcltech bigfix service management

    HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system details, potentially aiding attackers in targeting known vulnerabilities.

  6. CVE-2025-31959 3.5 Faible

    HCL Software BigFix Service Management (SM) · Hcltech bigfix service management

    HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location information is unintentionally shared. .

  7. CVE-2025-31957 5.7 Moyenne

    HCL Software BigFix Service Management (SM) · Hcltech bigfix service management

    HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data.