CVE-2025-31982 - HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl

Back Back to CVE browser

MEDIUM

HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl

Published May 6, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.15%

Description

HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.

Affected products

Vendor HCL Software Product BigFix Service Management (SM) Default
unaffected
- Version
  23
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

HCL Software

BigFix Service Management (SM)

unaffected

Version	Status	Constraints
23	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209697
Advisory
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209697		Advisory
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144		Vendor Advisory