CVE-2025-31980

MEDIUMCVSS 4.3

Description

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

Timeline

Published:October 1st, 2026 5:17 PM

Last modified:October 14th, 2026 1:10 PM

CVSS Scoring

CVSS v3: 4.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected Software

From NVD CPE configuration data

Vendors

hcltech

Products

bigfix_service_management

Weaknesses (CWE)

CWE-20

References & Reports

Advisories, patches, and third-party reports

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015Vendor Advisory

Source: NIST NVD · Data may lag official sources by up to one minute