Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-31983 HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts… https://www.cve.org/CVERecord?id=CVE-2025-31983
Post summary
This message announces that CVE‑2025‑31983 is a CSP header misconfiguration in HCL BigFix Service Management allowing script injection, with no details on PoC, exploitation, or patch.
🚨*CVE* CVE-2025-31983 HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This could allow attackers to inject malicious scripts… https://www.cve.org/CVERecord?id=CVE-2025-31983 ----- Traducción: CVE-2025-31983 HCL… http://infoflow.cloud`
Post summary
The tweet announces CVE-2025-31983 as a CSP header misconfiguration in HCL BigFix Service Management that could allow script injection, without detailing a PoC, exploit, active use, patch, or false positive claim.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hcltech | bigfix_service_management | 23.0 | - | - |