CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-0274

HCL BigFix Modern Client Management (MCM) 3.3 and earlier is affected by improper access control. Unauthorized users can access a small subset of endpoint actions, potentially allowing access to select internal functions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 11.6%

CVSS Severity

CVSS v3 Score 5.3

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124512

Products affected by CVE-2025-0274

Hcltech » Bigfix Mobile » Version: 1.0

cpe:2.3:a:hcltech:bigfix_mobile:1.0
Hcltech » Bigfix Mobile » Version: 2.0

cpe:2.3:a:hcltech:bigfix_mobile:2.0
Hcltech » Bigfix Mobile » Version: 2.1

cpe:2.3:a:hcltech:bigfix_mobile:2.1
Hcltech » Bigfix Mobile » Version: 3.0

cpe:2.3:a:hcltech:bigfix_mobile:3.0
Hcltech » Bigfix Mobile » Version: 3.1

cpe:2.3:a:hcltech:bigfix_mobile:3.1
Hcltech » Bigfix Modern Client Management » Version: 2.0

cpe:2.3:a:hcltech:bigfix_modern_client_management:2.0
Hcltech » Bigfix Modern Client Management » Version: 2.1

cpe:2.3:a:hcltech:bigfix_modern_client_management:2.1
Hcltech » Bigfix Modern Client Management » Version: 3.2

cpe:2.3:a:hcltech:bigfix_modern_client_management:3.2
Hcltech » Bigfix Modern Client Management » Version: 3.3

cpe:2.3:a:hcltech:bigfix_modern_client_management:3.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-0274

Products

Pricing

Contact Us