Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could populate data fields which, when saved to a CSV file, may attempt information exfiltration or other malicious activity when automatically executed by the spreadsheet software. Note that current versions of Excel warn users of untrusted content.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-31978 HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacke… https://www.cve.org/CVERecord?id=CVE-2025-31978
Post summary
The text announces a new vulnerability (CVE-2025-31978) in HCL BigFix Service Management regarding unsanitized spreadsheet file handling, but offers no PoC, exploit, or patch details.
🚨*CVE* CVE-2025-31978 HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacke… https://www.cve.org/CVERecord?id=CVE-2025-31978 ----- Traducción: CVE-2025-31978 HCL… http://infoflow.cloud`
Post summary
CVE‑2025‑31978 is disclosed as a vulnerability where HCL BigFix Service Management fails to sanitize spreadsheet files before processing or distribution.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hcltech | bigfix_service_management | 23.0 | - | - |