CVE-2025-31980

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*

History

14 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) HCL BigFix Service Management está afectado por una vulnerabilidad de validación de entrada incorrecta, que podría permitir a un atacante inyectar datos no validados y malformados en la aplicación, lo que podría habilitar ataques de inyección potenciales o errores en sistemas de procesamiento posteriores.

08 Oct 2026, 13:17

Type	Values Removed	Values Added
First Time		Hcltech bigfix Service Management Hcltech
References	~~() https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015 -~~	() https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015 - Vendor Advisory
CPE		cpe:2.3:a:hcltech:bigfix_service_management:27:-::::::

01 Oct 2026, 17:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-01 17:17

Updated : 2026-10-14 13:10

NVD link : CVE-2025-31980

Mitre link : CVE-2025-31980

CVE.ORG link : CVE-2025-31980

JSON object : View

Products Affected

hcltech

bigfix_service_management

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2025-31980", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-31980", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-01T16:33:19.736186Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "HCL BigFix Service Management", "versions": [{"status": "affected", "version": "Version 27"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-01T17:17:16.030", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems."}, {"lang": "es", "value": "HCL BigFix Service Management est\u00e1 afectado por una vulnerabilidad de validaci\u00f3n de entrada incorrecta, que podr\u00eda permitir a un atacante inyectar datos no validados y malformados en la aplicaci\u00f3n, lo que podr\u00eda habilitar ataques de inyecci\u00f3n potenciales o errores en sistemas de procesamiento posteriores."}], "lastModified": "2026-10-14T13:10:00.187", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:bigfix_service_management:27:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08B2E58A-98AF-44B9-A25D-84B0A4B209CC"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}