← Database

CVE-2025-31960

MEDIUM CVSS: 5.3 Published: 2026-05-06 Modified: 2026-06-17

Description

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or out-of-range value to the consumer_company parameter during a report-viewing request causes the application to trigger an unhandled exception.

Affected Platforms

Hcltech Bigfix Service Management

Weakness Type

CWE-209

References