CVE-2025-31962 in BigFix IVRinfo

Zusammenfassung

von MITRE • 07.01.2026

Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

HCL

Reservieren

01.04.2025

Veröffentlichung

07.01.2026

Moderieren

akzeptiert

Eintrag

VDB-339875

CPE

bereit

EPSS

0.00050

KEV

nein

Aktivitäten

very low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-31962
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-31962
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-31962/

◂ ZurückÜbersichtWeiter ▸

Want to know what is going to be exploited?

We predict KEV entries!