Bigfix Service Management (Sm)
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:bigfix_service_management_(sm):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Bigfix Service Management (Sm) (6f82b759-f27c-528b-a511-f55d2f6121b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-31982 |
vulnerable | 2026-06-08 07:18:58.889867 |
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl
LOW (3.7)
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.
Published: 2026-05-06T13:46:05.065Z
Updated: 2026-05-06T14:48:15.530Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31979 |
vulnerable | 2026-06-08 07:18:58.889231 |
A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)
MEDIUM (5.4)
A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.
Published: 2025-08-28T17:06:31.151Z
Updated: 2025-08-28T17:14:09.146Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31978 |
vulnerable | 2026-06-08 07:18:58.888978 |
HCL BigFix Service Management (SM) does not adequately sanitize or safely render
MEDIUM (4.6)
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could populate data fields which, when saved to a CSV file, may attempt information exfiltration or other malicious activity when automatically executed by the spreadsheet software. Note that current versions of Excel warn users of untrusted content.
Published: 2026-05-06T13:48:32.992Z
Updated: 2026-05-06T14:47:34.200Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31977 |
vulnerable | 2026-06-08 07:18:58.888613 |
A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)
MEDIUM (5.3)
HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.
Published: 2025-08-28T17:00:13.558Z
Updated: 2025-08-28T17:14:21.168Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31976 |
vulnerable | 2026-06-08 07:18:58.888164 |
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials
MEDIUM (4.8)
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .
Published: 2026-05-06T13:49:39.462Z
Updated: 2026-05-06T14:47:08.920Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31974 |
vulnerable | 2026-06-08 07:18:58.887265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31972 |
vulnerable | 2026-06-08 07:18:58.886328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31959 |
vulnerable | 2026-06-08 07:18:58.861469 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31957 |
vulnerable | 2026-06-08 07:18:58.859232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.