CVE-2025-31975 LOW

CVE-2025-31975: HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.

Vendor Hcl

Product BigFix Service Management (SM)

Weakness CWE-200 · Info exposure

Published May 6, 2026

Last update May 6, 2026

View on NVD All CVEs

CVSS base score

2.6/10

Attack vector Adjacent

Attack complexity High

Privileges required None

User interaction Required

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system details, potentially aiding attackers in targeting known vulnerabilities.

Key dates

02Disclosure timeline

May 6, 2026 CVE published

May 6, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-31975 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2024-13498 NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.8.1 - Unauthenticated Sensitive Information Exposure CVE-2023-44983 WordPress Aruba HiSpeed Cache Plugin <= 2.0.6 is vulnerable to Sensitive Data Exposure CVE-2024-3228 Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure CVE-2026-40490 AsyncHttpClient leaks authorization credentials to untrusted domains on cross-origin redirects CVE-2021-32716 Internal hidden fields are visible on to many associations in admin api