CVE-2025-31978 - CVE House

Back to Database

Status published Medium CVE-2025-31978

HCL BigFix Service Management (SM) does not adequately sanitize or safely render

4.6 CVSS

Vulnerability Description

HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could populate data fields which, when saved to a CSV file, may attempt information exfiltration or other malicious activity when automatically executed by the spreadsheet software. Note that current versions of Excel warn users of untrusted content.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-31978

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144

More from HCL Software

View All →

HCL Glovius Cloud is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability

HCL iControl was affected by Inadequate Session Timeout vulnerability

HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information

HCL DevOps Deploy / HCL Launch is susceptible to an insufficient session expiration vulnerability

Session Token Exposure via URL Query Parameters

Affected Vendor

HCL Software

View all reports →

Affected Software

BigFix Service Management (SM)

Vulnerable Versions:

23

Timeline

Official Publish: May 6th, 2026

Last Modified: May 6th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1041 Exfiltration Over C2 Channel

T1040 Network Sniffing

Credential Access

T1557 Adversary-in-the-Middle

T1552 Unsecured Credentials

Credential Access

T1078 Valid Accounts