by Kastro
Paper/Archive/CVE-2025-31973

CVE-2025-31973

HCL BigFix Service Management (SM) — HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'

EPSS 0.2%CVSS 9.8
critical.is priorityof 100
31
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 7.3.073 × 201.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.

Affected

ProductAffectedFixed inSource
BigFix Service Management (SM)23–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
HCL (CNA)4.0CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsupport.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144