CVE-2025-62338

HCL BigFix Cloud Lifecycle Management is affected by lack of input validation

View on CVE.org
Published Jun 4, 2026 CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Description
HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized access and may lead to information exposure.

Analysis

AI-generated

Technical impact

The revised description confirms a lack of input validation in HCL BigFix Cloud Lifecycle Management, which can allow unauthorized access and lead to information disclosure. The CVSS score of 3.3 indicates a low severity flaw, but the potential for sensitive data exposure remains a concern.

Affected Systems

HCL BigFix Cloud Lifecycle Management is the only affected product identified. No specific version ranges are listed in the CNA data.

Risk and Exploitability

The risk is modest; the flaw has a low CVSS score, the EPSS score is not available, and it is not listed in the CISA KEV catalog, suggesting no widespread exploitation has been observed. The likely attack vector is through unvalidated user input, potentially exposed on web or API interfaces, but the precise exploitation conditions are not detailed in the advisory.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the HCL fix referenced on the support link KB0130802
  • Validate all input fields and enforce strict input validation rules
  • Restrict network exposure of administrative interfaces to trusted networks

Generated by OpenCVE AI on June 5, 2026 at 08:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Hcltech
Hcltech bigfix Cloud Lifecycle Management
Vendors & Products Hcltech
Hcltech bigfix Cloud Lifecycle Management
Type Values Removed Values Added
Weaknesses CWE-284
Type Values Removed Values Added
Weaknesses CWE-20
CWE-200
Type Values Removed Values Added
Description The HCL BigFix Cloud Lifecycle Management is affected by Lack Of Input Validation. It may leads to an information exposure vulnerability. This low-level flaw allows unauthorized access. HCL BigFix Cloud Lifecycle Management is affected by lack of input validation.  This low-level flaw allows unauthorized access and may lead to information exposure.
Title The HCL BigFix Cloud Lifecycle Management is affected by Lack of Input Validation. HCL BigFix Cloud Lifecycle Management is affected by lack of input validation
Type Values Removed Values Added
Weaknesses CWE-20
CWE-200
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description The HCL BigFix Cloud Lifecycle Management is affected by Lack Of Input Validation. It may leads to an information exposure vulnerability. This low-level flaw allows unauthorized access.
Title The HCL BigFix Cloud Lifecycle Management is affected by Lack of Input Validation.
References
Metrics cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}
Earlier changes (2)
Weaknesses

Sources

Status
PUBLISHED
Assigner
HCL
Published
Updated
Jun 5, 2026, 4:44 AM
Reserved
Oct 10, 2025, 9:04 AM

View source JSON

Updated
Jun 4, 2026, 1:54 PM

JSON

Status
Awaiting Analysis
Published
Jun 4, 2026, 2:16 PM
Modified
Jul 22, 2026, 8:10 PM

View source JSON

No data.

Updated
Jun 5, 2026, 10:08 AM

JSON