CVE-2025-31973CWE-1395

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'

Medium · published May 20, 2026

CVSS v3.1
4.0
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00178 · 7.0th percentile
Weakness
CWE-1395 · Dependency on Vulnerable Third-Party Component
Published
2026-05-20T11:25Z
EPSS history
Timeline
  • 20 MAY 11:25Z
    HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'
    cvelistv5