Unrated severityNVD Advisory· Published Jan 7, 2026· Updated Jan 7, 2026
HCL BigFix IVR is impacted by improper authentication and missing CSRF protection
CVE-2025-31963
Description
Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests.
Affected products
2- Range: = 4.2
- HCLSoftware/BigFix IVRv5Range: 4.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.