VULNERABILITY INTELLIGENCE

CVE-2025-31981

CVSS score5.3 MEDIUM
EPSS probability0.09%
CISA KEVNot currently listed
Published2026-04-21
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.  An attacker with access to the network traffic can sniff packets from the connection and uncover the data.

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references