CVE-2025-31980 in BigFix Service Management

الملخص

بحسب MITRE • 01/10/2026

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• مسؤول: HCL
• حجز: 01/04/2025
• إفشاء: 01/10/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-412727
• CPE: 20261001
• CWE: CWE-20 (مؤكد)
• CVSS: 4.3 (CNA)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-31980
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-31980
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-31980/