CVE-2025-31975
Information Disclosure via Exposed Server Banner in HCL BigFix Service Management
Publication date: 2026-05-06
Last updated on: 2026-05-06
Assigner: HCL Software
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hcl | bigfix_service_management | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability in HCL BigFix Service Management (SM) is an Information Disclosure issue related to the server banner. This means that the server banners exposed by the system reveal software versions and system details.
Such exposed information can potentially help attackers by giving them clues about the software and system, which they might use to target known vulnerabilities.
How can this vulnerability impact me? :
This vulnerability can impact you by leaking information about your system and software versions through server banners.
Attackers can use this information to identify and exploit known vulnerabilities specific to those versions, increasing the risk of targeted attacks.
However, the CVSS base score of 2.6 indicates a low severity impact, with limited confidentiality impact and no integrity or availability impact.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability involves information disclosure through exposed server banners revealing software versions and system details. While this may aid attackers in targeting known vulnerabilities, the provided information does not specify any direct impact on compliance with standards such as GDPR or HIPAA.
Therefore, based on the available data, it is unclear how this vulnerability specifically affects compliance with common regulations.