# Hcltech Bigfix Service Management vulnerabilities

Source: https://junglewise.ai/threats/technologies/bigfix-service-management  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/bigfix-service-management.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 13 vulnerabilities in Hcltech Bigfix Service Management: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2025-31974, was published on 6 May 2026.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 13 (0 critical, 0 exploited in the wild)

## About Hcltech Bigfix Service Management

HCL BigFix Service Management is an IT service management platform that integrates patch management, asset management, and incident management capabilities.

## Latest Hcltech Bigfix Service Management vulnerabilities

- [CVE-2025-31974: HCL BigFix Service Management insecure root file system configuration](https://junglewise.ai/threats/cve-2025-31974-hcl-bigfix-service-management-insecure-root-file-system) (low, CVSS 3.9, published 6 May 2026)
- [CVE-2025-31960: HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its…](https://junglewise.ai/threats/cve-2025-31960-hcl-bigfix-service-management-sm-is-vulnerable-to-information) (medium, CVSS 5.3, published 6 May 2026)
- [CVE-2025-52613: HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an…](https://junglewise.ai/threats/cve-2025-52613-hcl-bigfix-service-management-sm-is-affected-by-use-of-a) (medium, CVSS 4.6, published 6 May 2026)
- [CVE-2025-31984: HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure…](https://junglewise.ai/threats/cve-2025-31984-hcl-bigfix-service-management-sm-is-affected-by-a-security) (low, CVSS 3.7, published 6 May 2026)
- [CVE-2025-31983: HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This…](https://junglewise.ai/threats/cve-2025-31983-hcl-bigfix-service-management-sm-is-affected-by-a-security) (low, CVSS 3.7, published 6 May 2026)
- [CVE-2025-31982: HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed…](https://junglewise.ai/threats/cve-2025-31982-hcl-bigfix-service-management-sm-had-directories-that-were-not) (low, CVSS 3.7, published 6 May 2026)
- [CVE-2025-31978: HCL BigFix Service Management CSV injection in spreadsheet exports](https://junglewise.ai/threats/cve-2025-31978-hcl-bigfix-service-management-csv-injection-in-spreadsheet) (medium, CVSS 4.6, published 6 May 2026)
- [CVE-2025-31976: HCL BigFix Service Management insufficiently protected credentials](https://junglewise.ai/threats/cve-2025-31976-hcl-bigfix-service-management-insufficiently-protected) (medium, CVSS 4.8, published 6 May 2026)
- [CVE-2025-31975: HCL BigFix Service Management (SM) is affected by an Information Disclosure , Server Banner issue was identified…](https://junglewise.ai/threats/cve-2025-31975-hcl-bigfix-service-management-sm-is-affected-by-an-information) (low, CVSS 2.6, published 6 May 2026)
- [CVE-2025-31959: HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to…](https://junglewise.ai/threats/cve-2025-31959-hcl-bigfix-service-management-sm-application-fails-to-strip-exif) (low, CVSS 3.5, published 6 May 2026)
- [CVE-2025-31957: HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead…](https://junglewise.ai/threats/cve-2025-31957-hhcl-bigfix-service-management-sm-is-affected-by-a-cross-site) (low, CVSS 2.6, published 6 May 2026)
- [CVE-2025-31981: HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open…](https://junglewise.ai/threats/cve-2025-31981-hcl-bigfix-service-management-sm-discovery-is-vulnerable-to) (medium, CVSS 5.3, published 21 Apr 2026)
- [CVE-2025-31958: HCL BigFix Service Management is susceptible to HTTP Request Smuggling. HTTP request smuggling vulnerabilities arise…](https://junglewise.ai/threats/cve-2025-31958-hcl-bigfix-service-management-is-susceptible-to-http-request) (low, CVSS 3.7, published 21 Apr 2026)

## Most severe Hcltech Bigfix Service Management vulnerabilities

- [CVE-2025-31960: HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its…](https://junglewise.ai/threats/cve-2025-31960-hcl-bigfix-service-management-sm-is-vulnerable-to-information) (medium, CVSS 5.3, published 6 May 2026)
- [CVE-2025-31981: HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open…](https://junglewise.ai/threats/cve-2025-31981-hcl-bigfix-service-management-sm-discovery-is-vulnerable-to) (medium, CVSS 5.3, published 21 Apr 2026)
- [CVE-2025-31976: HCL BigFix Service Management insufficiently protected credentials](https://junglewise.ai/threats/cve-2025-31976-hcl-bigfix-service-management-insufficiently-protected) (medium, CVSS 4.8, published 6 May 2026)
- [CVE-2025-52613: HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an…](https://junglewise.ai/threats/cve-2025-52613-hcl-bigfix-service-management-sm-is-affected-by-use-of-a) (medium, CVSS 4.6, published 6 May 2026)
- [CVE-2025-31978: HCL BigFix Service Management CSV injection in spreadsheet exports](https://junglewise.ai/threats/cve-2025-31978-hcl-bigfix-service-management-csv-injection-in-spreadsheet) (medium, CVSS 4.6, published 6 May 2026)
- [CVE-2025-31974: HCL BigFix Service Management insecure root file system configuration](https://junglewise.ai/threats/cve-2025-31974-hcl-bigfix-service-management-insecure-root-file-system) (low, CVSS 3.9, published 6 May 2026)
- [CVE-2025-31958: HCL BigFix Service Management is susceptible to HTTP Request Smuggling. HTTP request smuggling vulnerabilities arise…](https://junglewise.ai/threats/cve-2025-31958-hcl-bigfix-service-management-is-susceptible-to-http-request) (low, CVSS 3.7, published 21 Apr 2026)
- [CVE-2025-31982: HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed…](https://junglewise.ai/threats/cve-2025-31982-hcl-bigfix-service-management-sm-had-directories-that-were-not) (low, CVSS 3.7, published 6 May 2026)
- [CVE-2025-31984: HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure…](https://junglewise.ai/threats/cve-2025-31984-hcl-bigfix-service-management-sm-is-affected-by-a-security) (low, CVSS 3.7, published 6 May 2026)
- [CVE-2025-31983: HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This…](https://junglewise.ai/threats/cve-2025-31983-hcl-bigfix-service-management-sm-is-affected-by-a-security) (low, CVSS 3.7, published 6 May 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Hcltech technologies

- [Hcltech Unica](https://junglewise.ai/threats/technologies/unica): 11 vulnerabilities
- [Hcltech Aion](https://junglewise.ai/threats/technologies/hcltech-aion): 8 vulnerabilities
- [Hcltech Dfxanalytics](https://junglewise.ai/threats/technologies/hcltech-dfxanalytics): 5 vulnerabilities
- [Hcltech Bigfix Modern Client Management](https://junglewise.ai/threats/technologies/bigfix-modern-client-management): 4 vulnerabilities
- [Hcltech Bigfix Mobile](https://junglewise.ai/threats/technologies/hcltech-bigfix-mobile): 4 vulnerabilities
- [Hcltech Bigfix Insights For Vulnerability Remediation](https://junglewise.ai/threats/technologies/bigfix-insights-for-vulnerability-remediation): 3 vulnerabilities
- [Hcltech Unica Centralized Offer Management](https://junglewise.ai/threats/technologies/unica-centralized-offer-management): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Hcltech Bigfix Service Management vulnerabilities", https://junglewise.ai/threats/technologies/bigfix-service-management, 9 November 2026.