CVE-2025-31959CWE-1230
CVE-2025-31959
Low · published May 6, 2026
What it is
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location information is unintentionally shared. .
The record
Technical detail
- CVSS v3.1
- 3.5 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00143 · 3.3th percentile
- Weakness
- CWE-1230 · Exposure of Sensitive Information Through Metadata
- Published
- 2026-05-06T19:16Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| hcltech/bigfix_service_management | all versions | — |
References (1)
EPSS history
Timeline