ZeroDay Findings
Sign inSign up

Findings

CVE-2025-31957

HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability.

Published May 6, 2026 · updated Oct 7, 2026 · hcltech bigfix service management

HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 6, 2026 · NIST NVD

    Detected

    HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data.

  2. Oct 7, 2026 · NIST NVD

    Updated

    HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data.

Affected

  • cpe hcltech/bigfix service management23.0

Sources

  • CVE.orgVulnerability recordCVE-2025-31957

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-31957

    HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data.

    nvd.nist.gov

References