CVE-2025-59849 — HCL BigFix Remote Control is vulnerable to an insecure CSP configuration
Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.
Published: 2025-12-17 · CVSS: 4.7 · CVSS 3.1
Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7