CVE-2025-31980

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-10-01

Last modified

2026-10-14

Weaknesses

CWE-20

Affected products

• Hcl Bigfix Service Management (Hcl Software)
• Bigfix Service Management (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015