CVE Catalog

CVE-2025-31973

MediumCVSS 4.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

8th percentile - higher than 8% of all known CVEs

Summary

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.

Risk Assessment

Using outdated base images may allow an attacker to exploit known vulnerabilities, leading to application compromise.

Recommendation

Update the base images used in HCL BigFix Service Management to the latest secure versions. Regularly scan images for vulnerabilities.

Original NVD description (English source)

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS