Vulnerabilities
CVE-2025-31963 - HCL BigFix CSRF and Authentication Bypass Vulnerability
CVE ID : CVE-2025-31963 Published : Jan. 7, 2026, 8:21 a.m. | 1 hour, 48 minutes ago Description : Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests. Severity: 2.9 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Attack Vector:
local
Impact:
CSRF
Source: Telegram CVE Monitor