HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Oct 2025, 13:03
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hcltech:bigfix_mobile:*:*:*:*:*:*:*:* cpe:2.3:a:hcltech:bigfix_modern_client_management:*:*:*:*:*:*:*:* |
|
| First Time |
Hcltech
Hcltech bigfix Mobile Hcltech bigfix Modern Client Management |
|
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513 - Vendor Advisory |
16 Oct 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-16 09:15
Updated : 2025-10-21 13:03
NVD link : CVE-2025-0276
Mitre link : CVE-2025-0276
CVE.ORG link : CVE-2025-0276
JSON object : View
Products Affected
hcltech
- bigfix_mobile
- bigfix_modern_client_management