BigFix Service Management (SM) vulnerabilities

2 known vulnerabilities in BigFix Service Management (SM) from HCL. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  BigFix Service Management (SM): Insertion of Sensitive Information into Log File

  CVE-2024-30151May 6, 2026HCL

  HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation. This could allow unauthorized users to gain elevated privileges, bypassing intended access restrictions. This may result in exposure of sen

• 8.8 High severity

  BigFix Service Management (SM): Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-52613May 6, 2026HCL

  HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified. Deploying an outdated or insecure WSGI server may expose the application to known security weaknesses, potentially increasing the risk of exploitation and unautho