# CVE-2025-31983: HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This…

Source: https://junglewise.ai/threats/cve-2025-31983-hcl-bigfix-service-management-sm-is-affected-by-a-security  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-06  
License: CC BY 4.0 with a link back

CVE-2025-31983 · Severity: low · CVSS 3.7 · Published 2026-05-06

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header.  This could allow attackers to inject malicious scripts increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information.

Technologies: [Hcltech Bigfix Service Management](https://junglewise.ai/threats/technologies/bigfix-service-management). Vendors: [Hcltech](https://junglewise.ai/threats/vendors/hcltech).

## Quick answers

**Is CVE-2025-31983 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-31983 being exploited in the wild.

**How severe is CVE-2025-31983?** Low severity, with a CVSS score of 3.7, published 6 May 2026.

**Which products and versions are affected?** Hcltech Bigfix Service Management. The advisory does not name versions.

**Is there a fix for CVE-2025-31983?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-31983?** Check whether you run Hcltech Bigfix Service Management. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Hcltech Bigfix Service Management

## Related threats

- [HCL BigFix Service Management insecure root file system configuration](https://junglewise.ai/threats/cve-2025-31974-hcl-bigfix-service-management-insecure-root-file-system)
- [HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its…](https://junglewise.ai/threats/cve-2025-31960-hcl-bigfix-service-management-sm-is-vulnerable-to-information)
- [HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an…](https://junglewise.ai/threats/cve-2025-52613-hcl-bigfix-service-management-sm-is-affected-by-use-of-a)
- [HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header.](https://junglewise.ai/threats/cve-2025-31984-hcl-bigfix-service-management-sm-is-affected-by-a-security)
- [HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed…](https://junglewise.ai/threats/cve-2025-31982-hcl-bigfix-service-management-sm-had-directories-that-were-not)