CVE-2025-31973 PUBLISHED

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'

Assigner: HCL
Reserved: 01.04.2025 Published: 20.05.2026 Updated: 20.05.2026

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
CVSS Score: 4

Product Status

Vendor HCL
Product BigFix Service Management (SM)
Versions Default: unaffected
  • Version 23 is affected

References

Problem Types

  • CWE-1395: Dependency on Vulnerable Third-Party Component CWE