HCL Technologies BigFix Service Management (SM) 23.0
Approved changes feed: RSS · Atom
cpe:2.3:a:hcltech:bigfix_service_management:23.0:*:*:*:*:*:*:*
part: a version: 23.0 update: *
| Vendor | Hcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e) |
|---|---|
| Product | Bigfix Service Management (e500751e-2f3b-5283-8ae7-cf7c6551dbd7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-52613 |
vulnerable | 2026-06-08 07:31:12.788173 |
HCL BigFix Service Management (SM) is affected by use of a vulnerable component
MEDIUM (4.6)
HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the application to known security weaknesses, potentially increasing the risk of exploitation and unauthorized access.
Published: 2026-05-06T13:50:47.494Z
Updated: 2026-05-06T14:46:49.273Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31985 |
vulnerable | 2026-06-08 07:18:58.896580 |
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header
LOW (3.7)
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MIME-type sniffing, potentially causing malicious content to be interpreted and executed incorrectly.
Published: 2026-05-20T11:28:03.667Z
Updated: 2026-05-20T12:50:45.836Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31984 |
vulnerable | 2026-06-08 07:18:58.895987 |
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header
LOW (3.7)
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MIME-type sniffing, potentially causing malicious content to be interpreted and executed incorrectly.
Published: 2026-05-06T13:44:09.531Z
Updated: 2026-05-06T14:48:38.299Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31983 |
vulnerable | 2026-06-08 07:18:58.895557 |
HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header
LOW (3.7)
HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information.
Published: 2026-05-06T13:40:41.736Z
Updated: 2026-05-06T14:49:05.461Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31982 |
vulnerable | 2026-06-08 07:18:58.894977 |
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl
LOW (3.7)
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.
Published: 2026-05-06T13:46:05.065Z
Updated: 2026-05-06T14:48:15.530Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31981 |
vulnerable | 2026-06-08 07:18:58.889627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31978 |
vulnerable | 2026-06-08 07:18:58.889009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31977 |
vulnerable | 2026-06-08 07:18:58.888736 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31976 |
vulnerable | 2026-06-08 07:18:58.888272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31975 |
vulnerable | 2026-06-08 07:18:58.887829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31974 |
vulnerable | 2026-06-08 07:18:58.887378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31973 |
vulnerable | 2026-06-08 07:18:58.886919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31972 |
vulnerable | 2026-06-08 07:18:58.886372 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31960 |
vulnerable | 2026-06-08 07:18:58.863697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31959 |
vulnerable | 2026-06-08 07:18:58.861504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31958 |
vulnerable | 2026-06-08 07:18:58.861168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31957 |
vulnerable | 2026-06-08 07:18:58.859844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30151 |
vulnerable | 2026-06-08 06:35:29.092808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.