CVE-2025-31958General(hcltech / bigfix_service_management)

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

HCL BigFix Service Management is susceptible to HTTP Request Smuggling. HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request parsing between front-end and back-end servers, allowing attackers to bypass security controls and perform attacks like cache poisoning or request hijacking.

hcltech CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124209

Weakness type (CWE)

CWE-444

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

bigfix_service_management

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

hcltech

Products

bigfix_service_management

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2025-31958

Full discourse1 post

CVE@CVEnew171d
General
CVE-2025-31958 HCL BigFix Service Management is susceptible to HTTP Request Smuggling. HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web se… https://www.cve.org/CVERecord?id=CVE-2025-31958
Post summary
The post indicates that CVE‑2025‑31958 is a vulnerability for HTTP request smuggling in HCL BigFix Service Management, but does not provide any proof of concept, exploit details, remediation, or evidence of ongoing attacks.
00010155
57.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	hcltech	bigfix_service_management	23.0	-	-

Explore more

Back to dashboard hcltech CVEs bigfix_service_management vulnerabilities