CVE Catalog

CVE-2025-62338

LowCVSS 3.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.10%

1th percentile - higher than 1% of all known CVEs

Summary

HCL BigFix Cloud Lifecycle Management lacks input validation. This low-level flaw allows unauthorized access and may lead to information exposure.

Risk Assessment

Risk of unauthorized access to sensitive system or configuration data, potentially compromising integrity and confidentiality.

Recommendation

Apply security updates from HCL. Implement input validation mechanisms in the application.

Original NVD description (English source)

HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized access and may lead to information exposure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS