BigFix Service Management (SM) vulnerabilities

2 known vulnerabilities in BigFix Service Management (SM) from HCL Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  BigFix Service Management (SM): Initialization of a Resource with an Insecure Default

  CVE-2025-31974May 6, 2026HCL Software

  HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only. An improperly configured root file system may allow unintended modifications to critical system components, potentially increasing the risk of system compromise o

• 7.5 High severity

  BigFix Service Management (SM): Insufficiently Protected Credentials

  CVE-2025-31976May 6, 2026HCL Software

  HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .