Unrated severityNVD Advisory· Published Jan 7, 2026· Updated Jan 7, 2026
HCL BigFix IVR is impacted by an improper service binding configuration
CVE-2025-31964
Description
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface.
Affected products
2- Range: = 4.2
- HCLSoftware/BigFix IVRv5Range: 4.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.