CVE-2025-31959
Low · 3.5CVSS
3.5
EPSS
0.1%
Published
May 6, 2026
CISA due date
—
The record
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location information is unintentionally shared. .
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2025-59601 Information Disclosure when resetting device to factory default settings through… CWE-1230
- CVE-2026-45544 Nextcloud is an open source content collaboration platform. CWE-1230
- CVE-2026-49270 Exposure of Sensitive Information Through Metadata vulnerability in Apache ActiveMQ… CWE-1230
- CVE-2026-29055 Tandoor Recipes is an application for managing recipes, planning meals, and building… CWE-1230
- CVE-2026-27661 A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). CWE-1230
- CVE-2025-13084 The users endpoint in the groov View API returns a list of all users and associated… CWE-1230