Medium severity4.7NVD Advisory· Published Dec 17, 2025· Updated Jun 17, 2026

CVE-2025-59849

Description

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.

Affected products

HCL Software/BigFix Remote Control Lite Web Portalllm-create2 versions
<=10.1.0.0326+ 1 more
- (no CPE)range: <=10.1.0.0326
- (no CPE)range: <= 10.1.0.0326
Hcltechsw/Hcl Devops Deploy
cpe:2.3:a:hcltechsw:hcl_devops_deploy:*:*:*:*:*:*:*:*
Range: >=8.0.0.0,<8.0.1.11
Hcltechsw/Hcl Launch
cpe:2.3:a:hcltechsw:hcl_launch:*:*:*:*:*:*:*:*
Range: >=7.3.0.0,<7.3.2.16

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000