CVE-2025-55254

HCL BigFix Remote Control is vulnerable to a Path-relative stylesheet import (PRSSI) PUBLISHED

Description (CNA)

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Remote Control	affected <= 10.1.0.0326

CWE

CWE-601

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127332

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.