low3.5
CVE-2025-31959
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images.
Impact
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location information is unintentionally shared. .
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Bigfix Service Management | Version 23.0 |