HCL Software BigFix Service Management (SM)

• CVE-2025-31974 Low 3.9 HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only 0.2%
• CVE-2025-31976 Medium 4.8 HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials 0.2%
• CVE-2025-31978 Medium 4.6 HCL BigFix Service Management (SM) does not adequately sanitize or safely render 0.1%
• CVE-2025-31959 Low 3.5 HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. 0.1%
• CVE-2025-31982 Low 3.7 HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl 0.2%
• CVE-2025-31957 Low 2.6 HCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. <0.1%
• CVE-2025-31979 Medium 5.4 A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM) 0.2%
• CVE-2025-31977 Medium 5.3 A cryptographic weakness has been identified in the HCL BigFix Service Management (SM) 0.1%
• CVE-2025-31972 Medium 6.5 HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability <0.1%