What’s Vulnerable › Vulnerabilities

CVE-2025-62338: HCL BigFix Cloud Lifecycle Management is affected by lack of input validation

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-04 · updated 2026-07-22

Description

HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized access and may lead to information exposure.

Affected products

• HCLSoftware BigFix Cloud Lifecycle Management: 10.9.1 and 10.9.2

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130802

Get alerted when CVE-2025-62338 or the next vulnerability affects your stack