agentprime: hcl-software-bigfix-service-management-smEvery new CVE for hcl-software-bigfix-service-management-sm.https://agentprime.io/CVE-2025-31974: HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Onlyhttps://agentprime.io/advisories/CVE-2025-31974/https://agentprime.io/advisories/CVE-2025-31974/CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 18:01:39 GMTCVECVE-2025-31976: HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentialshttps://agentprime.io/advisories/CVE-2025-31976/https://agentprime.io/advisories/CVE-2025-31976/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 13:49:39 GMTCVECVE-2025-31978: HCL BigFix Service Management (SM) does not adequately sanitize or safely renderhttps://agentprime.io/advisories/CVE-2025-31978/https://agentprime.io/advisories/CVE-2025-31978/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 13:48:32 GMTCVECVE-2025-31959: HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.https://agentprime.io/advisories/CVE-2025-31959/https://agentprime.io/advisories/CVE-2025-31959/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 13:47:20 GMTCVECVE-2025-31982: HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directlhttps://agentprime.io/advisories/CVE-2025-31982/https://agentprime.io/advisories/CVE-2025-31982/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 13:46:05 GMTCVECVE-2025-31957: HCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability.https://agentprime.io/advisories/CVE-2025-31957/https://agentprime.io/advisories/CVE-2025-31957/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 06 May 2026 13:37:42 GMTCVECVE-2025-31979: A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)https://agentprime.io/advisories/CVE-2025-31979/https://agentprime.io/advisories/CVE-2025-31979/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Aug 2025 17:06:31 GMTCVECVE-2025-31977: A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)https://agentprime.io/advisories/CVE-2025-31977/https://agentprime.io/advisories/CVE-2025-31977/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Aug 2025 17:00:13 GMTCVECVE-2025-31972: HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerabilityhttps://agentprime.io/advisories/CVE-2025-31972/https://agentprime.io/advisories/CVE-2025-31972/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Aug 2025 16:50:07 GMTCVE