HCL BigFix Modern Client Management (MCM) 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Oct 2025, 13:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513 - Vendor Advisory | |
| First Time |
Hcltech bigfix Modern Client Management
Hcltech bigfix Mobile Hcltech |
|
| CPE | cpe:2.3:a:hcltech:bigfix_mobile:*:*:*:*:*:*:*:* cpe:2.3:a:hcltech:bigfix_modern_client_management:*:*:*:*:*:*:*:* |
16 Oct 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-16 09:15
Updated : 2025-10-21 13:03
NVD link : CVE-2025-0276
Mitre link : CVE-2025-0276
CVE.ORG link : CVE-2025-0276
JSON object : View
Products Affected
hcltech
- bigfix_mobile
- bigfix_modern_client_management