High severity8.2NVD Advisory· Published Jul 29, 2025· Updated Apr 15, 2026

CVE-2025-31965

Description

Improper access restrictions in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0248 and lower) allow non-admin users to view unauthorized information on certain web pages.

Affected products

HCL Software/BigFix Remote Control Server WebUIllm-create
Range: <=10.1.0.0248

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000