Findings

CVE-2025-31980

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the a…

Published Oct 1, 2026 · updated Oct 14, 2026 · hcltech bigfix service management

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 1, 2026 · NIST NVD

    Detected

    HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

  2. Oct 14, 2026 · NIST NVD

    Updated

    HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

Affected

  • cpe hcltech/bigfix service management27

Sources

  • CVE.orgCVE-2025-31980

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2025-31980

    HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems.

    nvd.nist.gov

References

CVE-2025-31980 · ZeroDay Findings