Medium severity · published Aug 28, 2025
CVE-2025-31979
A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)
5.4
CVSS
0.2%
EPSS
No
On KEV
Description
A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing client-side or server-side validation mechanisms.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
BigFix Service Management (SM) · HCL Software
23 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-31979
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-31979
support.hcl-software.com
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123631
More from BigFix Service Management (SM)
7.5
CVE-2025-31976
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials
7.2
CVE-2025-31974
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only
6.5
CVE-2025-31982
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directl
6.5
CVE-2025-31977
A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)
6.5
CVE-2025-31972
HCL BigFix Service Management (SM) is affected by a Sensitive Information Exposure vulnerability