CVE-2025-31960 — HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its re…

CVE-2025-31960

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module PUBLISHED

Description (CNA)

HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module. It was observed that supplying an invalid or out-of-range value to the consumer_company parameter during a report-viewing request causes the application to trigger an unhandled exception.

Affected (CNA)

Vendor / product	Versions
HCL / BigFix Service Management (SM)	affected 23

CWE

CWE-209

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.