ZeroDay Findings
Sign inSign up

Findings

CVE-2025-31980

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the a…

Published Oct 1, 2026 · updated Oct 14, 2026 · hcltech bigfix service management

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 1, 2026 · NIST NVD

    Detected

    HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

  2. Oct 14, 2026 · NIST NVD

    Updated

    HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

Affected

  • cpe hcltech/bigfix service management27

Sources

  • CVE.orgVulnerability recordCVE-2025-31980

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-31980

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2025-31980

    HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

    nvd.nist.gov

References