2.6
/ 10
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Description
HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data.
Basic Information
ID
CVE-2025-31957
Source
HCL
Published
May 6, 2026 at 13:37
Affected Product
Vendor
HCL Software
Product
BigFix Service Management (SM)
Version
23
Affected Versions
HCL Software BigFix Service Management (SM) 23