CVE-2025-59849

HCL BigFix Remote Control is vulnerable to an insecure CSP configuration PUBLISHED

Description (CNA)

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix Remote Control	affected <= 10.1.0.0326

CWE

CWE-1021, CWE-693

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127332

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.