CVE-2025-31960
HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module
- State
- Published
- Severity
- 5.3 Medium
- Published
- May 6, 2026
- Updated
- May 6, 2026
- Reserved
- Apr 1, 2025
Description
HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or out-of-range value to the consumer_company parameter during a report-viewing request causes the application to trigger an unhandled exception.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | HCL |
Weaknesses
- CWE-209 Generation of Error Message Containing Sensitive Information.
Affected Products
| Product | Versions |
|---|---|
BigFix Service Management (SM)HCL |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.