CVE-2025-62345

LowCVSS 2.7

Published: 06/05/2026(UTC)Updated: 07/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

11th percentile - higher than 11% of all known CVEs

Summary

HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure 'Input Text' Vulnerability. A component contains a security weakness in its input handling implementation, increasing the risk of misconfiguration and operational errors.

Risk Assessment

The risk includes an increased likelihood of misconfiguration and operational issues, which could lead to improper application behavior or security compromise.

Recommendation

It is recommended to review and strengthen input handling mechanisms, and to upgrade to the latest version of BigFix RunBookAI.

Other vulnerabilities in HCL BigFix RunBookAI

CVE-2025-31951High
HCL BigFix RunBookAI is affected by a vulnerability related to unvalidated command input, which could allow unauthorized command execution. A flaw in a component's input handling was identified.

Original NVD description (English source)

HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability . A component contains a security weakness in its input handling implementation, increasing the risk of misconfiguration and operational errors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS