CVE-2025-52613 MEDIUM

CVE-2025-52613: HCL BigFix Service Management (SM) is affected by use of a vulnerable component

Vendor Hcl
Product BigFix Service Management (SM)
Weakness CWE-200 · Info exposure
Published May 6, 2026
Last update May 6, 2026
View on NVD All CVEs

CVSS base score

4.6/10
Attack vector Adjacent
Attack complexity High
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the application to known security weaknesses, potentially increasing the risk of exploitation and unauthorized access.

Key dates

02Disclosure timeline

May 6, 2026 CVE published
May 6, 2026 Record updated