Hcl Software Bigfix Service Management (Sm)

9 CVEs affecting Hcl Software Bigfix Service Management (Sm). Latest disclosed: 2026-05-06. Critical: 0, High: 0.

Top CVEs affecting Hcl Software Bigfix Service Management (Sm)
CVESeverityScorePublishedSummary
CVE-2025-31972Medium6.52025-08-28HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker…
CVE-2025-31979Medium5.42025-08-28A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions…
CVE-2025-31977Medium5.32025-08-28HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms.  An attacker with network access could exploit this weakness…
CVE-2025-31976Medium4.82026-05-06HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal appl…
CVE-2025-31978Medium4.62026-05-06HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An…
CVE-2025-31974Low3.92026-05-06HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow unintend…
CVE-2025-31982Low3.72026-05-06HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk…
CVE-2025-31959Low3.52026-05-06HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sens…
CVE-2025-31957Low2.62026-05-06HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of s…