CVE-2025-0277

MediumCVSS 6.1/10Last modified Oct 8, 2026

Description

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy (CSP). An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-80 CWE-693

Affected software

No affected versions have been published.

Timeline

Published: Oct 16, 2025
Last modified: Oct 8, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-02784.3HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file pa CVE-2025-02794.3HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, CVE-2025-02807.5A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access.CVE-2025-02815.4A stored cross-site scripting (XSS) vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious Ja CVE-2025-02829.0A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu CVE-2025-02837.0A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu CVE-2025-02857.8Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure t CVE-2025-02868.4Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to CVE-2025-02875.1Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid M CVE-2025-02887.8Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function,CVE-2025-02897.8Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the Mapp CVE-2025-02904.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from