Skip to content
OpenAdvisories
Medium · 4.8 CVE-2025-31976 EUVD-2025-209693GHSA-hv3j-f356-x9xp

HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials

Published May 6, 2026 · Updated May 6, 2026 · Assigned by HCL

Description

HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .

Affected products

VendorProductAffectedFixed
HCL Software BigFix Service Management (SM) 23 —

Advisories 1

References