CVE-2025-59849
HCL BigFix Remote Control is vulnerable to an insecure CSP configuration
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 Dec 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
HCL Software · BigFix Remote ControlWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →