Hclsoftware Bigfix Service Management (SM) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Hclsoftware Bigfix Service Management (SM), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.2CVE-2025-31958hclsoftwarebigfix service management (sm)+1
EPSS score
0.18%
HCL BigFix Service Management is susceptible to HTTP Request Smuggling.  HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request parsing between front-end and back-end servers, allowing attackers to bypass security controls and perform attacks like cache poisoning or request hijacking.5.3CVE-2025-31981hclsoftwarebigfix service management (sm)+1
EPSS score
0.09%
HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.  An attacker with access to the network traffic can sniff packets from the connection and uncover the data.