HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Oct 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hcltech:bigfix_mobile:*:*:*:*:*:*:*:* cpe:2.3:a:hcltech:bigfix_modern_client_management:*:*:*:*:*:*:*:* |
|
| First Time |
Hcltech bigfix Modern Client Management
Hcltech bigfix Mobile Hcltech |
|
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124513 - Vendor Advisory |
16 Oct 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-16 09:15
Updated : 2025-10-21 18:15
NVD link : CVE-2025-0277
Mitre link : CVE-2025-0277
CVE.ORG link : CVE-2025-0277
JSON object : View
Products Affected
hcltech
- bigfix_mobile
- bigfix_modern_client_management