Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2025-31983

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header

Description

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL BigFix Service Management (SM)

Default version status: unaffected

  • 23affected

References