CVE-2025-31959
LOW3.5CVSS v3
—CVSS v2
0.03%
EPSS (exploit probability)
CWE-1230CWE
Description
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location information is unintentionally shared. .
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.