5.3

CVE-2025-31981

EPSS 0.09%
Veröffentlicht 21.04.2026 14:26:39
Zuletzt bearbeitet 07.10.2026 09:10:00
Erkennungen
Login

HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption

HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.  An attacker with access to the network traffic can sniff packets from the connection and uncover the data.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Hcltech ≫ Bigfix Service Management Version 23.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.09%	0.005

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@hcl.com	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127605

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-31981

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-31981

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-31981

EUVD