CVE-2025-31978
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could populate data fields which, when saved to a CSV file, may attempt information exfiltration or other malicious activity when automatically executed by the spreadsheet software.
Risk Assessment
The risk involves potential exfiltration of sensitive organizational data or execution of unauthorized actions on user workstations if a malicious CSV file is opened in spreadsheet software without proper safeguards.
Recommendation
It is recommended to immediately update HCL BigFix Service Management to the latest patched version and enforce policies that block automatic execution of macros in spreadsheet applications.
Other vulnerabilities in HCL BigFix Service Management
See all- CVE-2025-31985Low
Missing or insecure X-Content-Type-Options header in HCL BigFix Service Management (SM) allows browsers to perform MIME-type sniffing. This could cause malicious content to be interpreted and executed incorrectly.
- CVE-2025-31973Medium
HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.
- CVE-2025-31976Medium
The vulnerability in HCL BigFix Service Management (SM) involves insufficiently protected credentials for a short duration during communication with a backend internal application. This could allow an attacker to intercept and misuse them if exfiltrated.
Original NVD description (English source)
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could populate data fields which, when saved to a CSV file, may attempt information exfiltration or other malicious activity when automatically executed by the spreadsheet software. Note that current versions of Excel warn users of untrusted content.