4.3Medium
CVE-2025-31980HCL BigFix Service Management is affected by multiple security vulnerabilities.
Description
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.
Weakness (CWE):
CWE-20
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| HCL Software | HCL BigFix Service Management | Version 27 | |
| hcltech | bigfix service management | 27 |
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*