CVE-2025-31958CWE-444

CVE-2025-31958

Low · published April 21, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

HCL BigFix Service Management is susceptible to HTTP Request Smuggling.  HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request parsing between front-end and back-end servers, allowing attackers to bypass security controls and perform attacks like cache poisoning or request hijacking.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00177 · 7.0th percentile
Weakness
CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Published
2026-04-21T19:16Z
Affected products (1)
ProductVersionsFixed in
hcltech/bigfix_service_managementall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124209 · [email protected]
EPSS history
Timeline
  • 21 APR 13:59Z
    HCL BigFix Service Management (SM) is susceptible to HTTP Request Smuggling
    cvelistv5