CVE-2025-31960CWE-209

CVE-2025-31960

Medium · published May 6, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or out-of-range value to the consumer_company parameter during a report-viewing request causes the application to trigger an unhandled exception.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00240 · 14.3th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2026-05-06T23:16Z
Affected products (1)
ProductVersionsFixed in
hcltech/bigfix_service_managementall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144 · [email protected]
EPSS history
Timeline
  • 06 MAY 18:02Z
    HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module
    cvelistv5