Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-0277

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.

Published

2025-10-16T09:15:32.983

Last Modified

2025-10-21T18:15:34.460

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-79
    CWE-80
    CWE-693
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hcltech bigfix_mobile ≤ 3.3 Yes
Application hcltech bigfix_modern_client_management < 3.4 Yes
References