Information disclosure in Hcl Bigfix Service Management (Sm)
CVE-2025-52613
HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the application to known security weaknesses, potentially increasing the risk of exploitation and unauthorized access.
Vulnerability class: Information Disclosure
EPSS: 0.002 (14.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Hcl Bigfix Service Management (Sm) — versions 23
- Hcltech Bigfix_service_management — versions 23.0
Weakness classification (CWE)
References
- psirt@hcl.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2025-52613?
- CVE-2025-52613 is a medium-severity vulnerability in Hcl Bigfix Service Management (Sm), classified under Information Disclosure. CVSS score: 4.6/10. Published 2026-05-06.
- How severe is CVE-2025-52613?
- Medium severity. CVSS v3 base score is 4.6 out of 10.