CVE-2025-31960Disclosure(hcltech / bigfix_service_management)

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or out-of-range value to the consumer_company parameter during a report-viewing request causes the application to trigger an unhandled exception.

hcltech CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144

Weakness type (CWE)

CWE-209

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

bigfix_service_management

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

hcltech

Products

bigfix_service_management

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud156d
Disclosure
🚨*CVE* CVE-2025-31960 HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an… https://www.cve.org/CVERecord?id=CVE-2025-31960 ----- Traducción: CVE-2025-31960 HCL… http://infoflow.cloud`
Post summary
The post announces CVE‑2025‑31960, describing information‑exposure via improper error handling in HCL BigFix Service Management, with no PoC, exploit, patch, or active exploitation disclosed.
000001.1K
75 followersView on X
CVE@CVEnew156d
Disclosure
CVE-2025-31960 HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an… https://www.cve.org/CVERecord?id=CVE-2025-31960
Post summary
CVE-2025-31960 is a disclosed vulnerability in HCL BigFix Service Management’s reporting module that can lead to information exposure via improper error handling.
00000810
57.4K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	hcltech	bigfix_service_management	23.0	-	-

Explore more

Back to dashboard hcltech CVEs bigfix_service_management vulnerabilities