CVE-2025-55254

Medium · 4.8

CVSS

4.8

EPSS

0.2%

Published

Dec 17, 2025

CISA due date

—

The record

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.

Affected packages

Ecosystem	Package	Introduced	Fixed