Vulnerabilities (CVE)

Filtered by vendor Hcltech Subscribe
Filtered by product Bigfix Service Management
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-31977 1 Hcltech 1 Bigfix Service Management 2025-10-29 N/A 5.3 MEDIUM
HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms.  An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions.
CVE-2025-31972 1 Hcltech 1 Bigfix Service Management 2025-10-29 N/A 6.5 MEDIUM
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components.