Approved changes feed: RSS · Atom

cpe:2.3:a:hcl:bigfix_service_management_(sm):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl (1d3f8112-3eea-57b2-9fe3-0239de9402c9)
ProductBigfix Service Management (Sm) (ddacd640-9b0e-5867-a9e6-540627ee3f2d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-52613 vulnerable 2026-06-08 07:31:12.782502 HCL BigFix Service Management (SM) is affected by use of a vulnerable component
MEDIUM (4.6)
HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the application to known security weaknesses, potentially increasing the risk of exploitation and unauthorized access.
Published: 2026-05-06T13:50:47.494Z
Updated: 2026-05-06T14:46:49.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31985 vulnerable 2026-06-08 07:18:58.896421 HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header
LOW (3.7)
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MIME-type sniffing, potentially causing malicious content to be interpreted and executed incorrectly.
Published: 2026-05-20T11:28:03.667Z
Updated: 2026-05-20T12:50:45.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31984 vulnerable 2026-06-08 07:18:58.895852 HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header
LOW (3.7)
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MIME-type sniffing, potentially causing malicious content to be interpreted and executed incorrectly.
Published: 2026-05-06T13:44:09.531Z
Updated: 2026-05-06T14:48:38.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31983 vulnerable 2026-06-08 07:18:58.895420 HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header
LOW (3.7)
HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information.
Published: 2026-05-06T13:40:41.736Z
Updated: 2026-05-06T14:49:05.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31975 vulnerable 2026-06-08 07:18:58.887722 HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.
LOW (2.6)
HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system details, potentially aiding attackers in targeting known vulnerabilities.
Published: 2026-05-06T13:51:40.756Z
Updated: 2026-05-06T14:46:31.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31973 vulnerable 2026-06-08 07:18:58.886776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31960 vulnerable 2026-06-08 07:18:58.863540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30151 vulnerable 2026-06-08 06:35:29.092065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.