CVE-2025-55254

HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)

State: Published
Severity: 3.7 Low
Published: Dec 17, 2025
Updated: Dec 18, 2025
Reserved: Aug 12, 2025

Description

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.

Scores

CVSS	Score	Vector	Source
3.1	3.7 Low	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	HCL

Weaknesses

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Affected Products

Product	Versions
BigFix Remote ControlHCL Software	<= 10.1.0.0326Affected

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127332

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.