Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2025-31959

HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location information is unintentionally shared. .

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software BigFix Service Management (SM)

Default version status: unaffected

  • 23affected

References