CVE-2025-55254CWE-601

HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)

Low · published December 17, 2025

CVSS v3.1
3.7
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00193 · 8.5th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2025-12-17T20:46Z
EPSS history
Timeline
  • 17 DEC 20:46Z
    HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI)
    cvelistv5