CVEvulnerability

CVE-2025-59849

6.1 MEDIUM Published 2025-12-17 Modified 2026-09-30 Official page ↗
Status
Analyzed
Published
2025-12-17
Last modified
2026-09-30
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-1021, CWE-693

Description

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.

Affected configurations

• hcltechsw hcl devops deploy (>= 8.0.0.0 < 8.0.1.11) • hcltechsw hcl devops deploy (>= 8.1.0 < 8.1.2.4) • hcltechsw hcl launch (>= 7.3.0.0 < 7.3.2.16)

Related

Weakness · CWE (2)

  • CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness
  • CWE-693 Protection Mechanism Failure weakness

References