CVE-2025-31958

HCL BigFix Service Management (SM) is susceptible to HTTP Request Smuggling

State: Published
Severity: 3.7 Low
Published: Apr 21, 2026
Updated: Apr 21, 2026
Reserved: Apr 1, 2025

Description

HCL BigFix Service Management is susceptible to HTTP Request Smuggling. HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request parsing between front-end and back-end servers, allowing attackers to bypass security controls and perform attacks like cache poisoning or request hijacking.

Scores

CVSS	Score	Vector	Source
3.1	3.7 Low	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	HCL

Weaknesses

CWE-444 Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling')

Affected Products

Product	Versions
BigFix Service Management (SM)HCLSoftware	23Affected

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124209

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.