Medium severity6.5NVD Advisory· Published Aug 28, 2025· Updated Jun 17, 2026
CVE-2025-31972
CVE-2025-31972
Description
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.
Affected products
2- HCL Software/BigFix Service Management (SM)v5Range: 23
Patches
Vulnerability mechanics
References
1- support.hcl-software.com/csmnvdVendor Advisory
News mentions
0No linked articles in our index yet.