Skip to content
OpenAdvisories
Low · 3.7 CVE-2025-55254 EUVD-2025-203970GHSA-9287-x4fm-8g85

HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)

Published Dec 17, 2025 · Updated Dec 18, 2025 · Assigned by HCL

Description

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.

Affected products

VendorProductAffectedFixed
HCL Software BigFix Remote Control <= 10.1.0.0326 —

Advisories 1

References