Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-0277

HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software BigFix Mobile

Default version status: unaffected

  • <=3.3affected

References