# CVE-2025-31957: HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead…

Source: https://junglewise.ai/threats/cve-2025-31957-hhcl-bigfix-service-management-sm-is-affected-by-a-cross-site  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-06  
License: CC BY 4.0 with a link back

CVE-2025-31957 · Severity: low · CVSS 2.6 · Published 2026-05-06

HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability.  This could lead to unauthorized changes or exposure of sensitive data.

Technologies: [Hcltech Bigfix Service Management](https://junglewise.ai/threats/technologies/bigfix-service-management). Vendors: [Hcltech](https://junglewise.ai/threats/vendors/hcltech).

## Quick answers

**Is CVE-2025-31957 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-31957 being exploited in the wild.

**How severe is CVE-2025-31957?** Low severity, with a CVSS score of 2.6, published 6 May 2026.

**Which products and versions are affected?** Hcltech Bigfix Service Management. The advisory does not name versions.

**Is there a fix for CVE-2025-31957?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-31957?** Check whether you run Hcltech Bigfix Service Management. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Hcltech Bigfix Service Management

## Related threats

- [HCL BigFix Service Management insecure root file system configuration](https://junglewise.ai/threats/cve-2025-31974-hcl-bigfix-service-management-insecure-root-file-system)
- [HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its…](https://junglewise.ai/threats/cve-2025-31960-hcl-bigfix-service-management-sm-is-vulnerable-to-information)
- [HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an…](https://junglewise.ai/threats/cve-2025-52613-hcl-bigfix-service-management-sm-is-affected-by-use-of-a)
- [HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header.](https://junglewise.ai/threats/cve-2025-31984-hcl-bigfix-service-management-sm-is-affected-by-a-security)
- [HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This…](https://junglewise.ai/threats/cve-2025-31983-hcl-bigfix-service-management-sm-is-affected-by-a-security)