HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Oct 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513 - Vendor Advisory | |
| CPE | cpe:2.3:a:hcltech:bigfix_mobile:*:*:*:*:*:*:*:* cpe:2.3:a:hcltech:bigfix_modern_client_management:*:*:*:*:*:*:*:* |
|
| First Time |
Hcltech
Hcltech bigfix Modern Client Management Hcltech bigfix Mobile |
16 Oct 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-16 09:15
Updated : 2025-10-21 18:15
NVD link : CVE-2025-0277
Mitre link : CVE-2025-0277
CVE.ORG link : CVE-2025-0277
JSON object : View
Products Affected
hcltech
- bigfix_mobile
- bigfix_modern_client_management