CVE-2025-31982 LOW

CVE-2025-31982: HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl

Vendor Hcl Software
Product BigFix Service Management (SM)
Weakness CWE-200 · Info exposure
Published May 6, 2026
Last update May 6, 2026
View on NVD All CVEs

CVSS base score

3.7/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly. This could allow an increased risk of information disclosure or misuse of sensitive functionality.

Key dates

02Disclosure timeline

May 6, 2026 CVE published
May 6, 2026 Record updated