What’s Vulnerable › Vulnerabilities

CVE-2025-31973: HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-20 · updated 2026-07-24
• Weakness: CWE-1395

Description

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.

Affected products

• HCL Software HCL BigFix Service Management: 23.0

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144

Get alerted when CVE-2025-31973 or the next vulnerability affects your stack