CVE-2025-31960 MEDIUM

CVE-2025-31960: HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module

Vendor Hcl
Product BigFix Service Management (SM)
Weakness CWE-209 · Error message info leak
Published May 6, 2026
Last update May 6, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or out-of-range value to the consumer_company parameter during a report-viewing request causes the application to trigger an unhandled exception.

Key dates

02Disclosure timeline

May 6, 2026 CVE published
May 6, 2026 Record updated