BS
Product
Bigfix Service Management
by Hcltech · last CVE Oct 1, 2026
36
CVEs
0
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 5High 8Medium 20Low 3
Watch

Add Bigfix Service Management to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-21806
9.8
0%
Sep 18
HCL BigFix Service Management was affected with Admin Session Concurrency vulnerability (CVE-2026-21806)
Affected: 27
CVE-2026-56592
9.8
0%
Sep 18
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 23; 27
CVE-2026-56590
9.8
0%
Sep 18
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 23; 27
CVE-2026-67100
9.8
0%
Sep 18
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 23; 27
CVE-2025-31973
9.8
0%
May 20
HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'
Affected: 23.0
CVE-2025-52613
8.8
0%
May 6
HCL BigFix Service Management (SM) is affected by use of a vulnerable component
Affected: 23.0
CVE-2024-30151
8.3
0%
May 6
HCL BigFix Service Management (SM) is susceptible to Broken Access Control Vulnerability
Affected: 23.0
CVE-2025-31958
8.2
0%
Apr 21
HCL BigFix Service Management (SM) is susceptible to HTTP Request Smuggling
Affected: 23.0
CVE-2026-67102
8.1
0%
Sep 18
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 23; 27
CVE-2025-31976
7.5
0%
May 6
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials
Affected: 23.0
CVE-2026-67105
7.4
0%
Oct 1
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 27
CVE-2026-56589
7.2
0%
Oct 1
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 27
CVE-2025-31974
7.2
0%
May 6
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only
Affected: 23.0
CVE-2025-31985
6.5
0%
May 20
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header
Affected: 23.0
CVE-2025-31982
6.5
0%
May 6
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl
Affected: 23.0
CVE-2025-31977
6.5
0%
Aug 28
HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms.  An attacker with network access could exploit this weakness to decrypt or…
Affected: 23.0
CVE-2025-31972
6.5
0%
Aug 28
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access…
Affected: 23.0
CVE-2026-67103
6.1
0%
Sep 18
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 23; 27
CVE-2026-67101
5.8
0%
Sep 18
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 23; 27
CVE-2025-31957
5.7
0%
May 6
HCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability.
Affected: 23.0
CVE-2025-31984
5.4
0%
May 6
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header
Affected: 23.0
CVE-2026-67171
5.3
0%
Oct 1
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 27
CVE-2026-67106
5.3
0%
Oct 1
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 27
CVE-2026-67104
5.3
0%
Oct 1
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 27
CVE-2026-56597
5.3
0%
Sep 18
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 23; 27
CVE-2025-31960
5.3
0%
May 6
HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module
Affected: 23.0
CVE-2025-31975
5.3
0%
May 6
HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.
Affected: 23.0
CVE-2025-31981
5.3
0%
Apr 21
HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption
Affected: 23.0
CVE-2026-21848
5.0
0%
Sep 18
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 23; 27
CVE-2025-31983
4.6
0%
May 6
HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header
Affected: 23.0
CVE-2025-31980
4.3
0%
Oct 1
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 27
CVE-2026-56595
4.3
0%
Sep 18
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 23; 27
CVE-2025-31978
4.3
0%
May 6
HCL BigFix Service Management (SM) does not adequately sanitize or safely render
Affected: 23.0
CVE-2026-67172
3.7
0%
Oct 1
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 27
CVE-2025-31959
3.5
0%
May 6
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.
Affected: 23.0
CVE-2026-56599
2.2
0%
Oct 1
HCL BigFix Service Management is affected by multiple security vulnerabilities.
Affected: 27
Showing 36