CVE-2025-31973

9.8 criticalEPSS 0.2%

Critical (9.8) in hcltech bigfix service management. EPSS 0.2% chance of exploitation in the next 30 days.

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
Published: 2026-05-20
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19

Affected

hcltech:bigfix_service_management

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144

Check your stack JSON