Medium severity6.5NVD Advisory· Published Aug 28, 2025· Updated Sep 26, 2026
CVE-2025-31972
CVE-2025-31972
Description
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.
Affected products
3- cpe:2.3:a:hcltech:bigfix_service_management:23.0:*:*:*:*:*:*:*
- Range: 23
Patches
Vulnerability mechanics
References
1- support.hcl-software.com/csmnvdVendor Advisory
News mentions
0No linked articles in our index yet.