Insecure Configuration in HCL BigFix Service Management
CVE-2025-31973

4MEDIUM

Key Information:

Vendor
CVE Published:
20 May 2026

What is CVE-2025-31973?

HCL BigFix Service Management is vulnerable due to the insecure use of outdated or insecure base images. This misconfiguration can lead to the introduction of known vulnerabilities, heightening the risk of exploitation in the application environment and impacting the security posture of the organization. It is crucial for users to regularly update their base images to mitigate potential threats and ensure robust application security.

Affected Version(s)

BigFix Service Management (SM) 23

References

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.