CVE-2025-59849

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-59849
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-59849.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-59849
Published
2025-12-17T21:16:14.873Z
Modified
2026-03-13T03:39:57.333639Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.

References

Affected packages

Git /

Affected ranges

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "8.0.0.0"
            },
            {
                "fixed": "8.0.1.11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "8.1.0"
            },
            {
                "fixed": "8.1.2.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "7.3.0.0"
            },
            {
                "fixed": "7.3.2.16"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-59849.json"