CVE-2025-52613

8.8 Élevée

Publiée le 06/05/2026 à 17:16 · Modifiée le 07/10/2026 à 11:10 · Analysée par le NVD · Source : psirt@hcl.com

Description

HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the application to known security weaknesses, potentially increasing the risk of exploitation and unauthorized access.

Traduire en français

Produits concernés

HCL BigFix Service Management (SM)
Hcltech bigfix service management

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.6 Moyenne	psirt@hcl.com	`CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L`
3.1	8.8 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-200

Références

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories