CVE-2025-59849

—

CVSS 3.1

6.1 medium

EPSS

<1%p8

Published

Dec 17, 2025 (Dec 17, 2025)

Modified

Jun 17, 2026

Description

Improper management of Content Security Policy in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow the execution of malicious code in web pages.

Vendors: hcltechsw
Products: hcl devops deploy, hcl launch
Weakness: CWE-693, CWE-1021
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.