GCVE - cpe:2.3:a:hcl_software:bigfix_saas_remediate:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:bigfix_saas_remediate:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Hcl Software (`ae8892dc-f7dc-53a3-b2bf-67149bcc5847`)
Product	Bigfix Saas Remediate (`f5bb4bfb-ac27-5e40-b53e-05ac32c9e37e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-52622`	vulnerable	2026-06-08 07:31:12.796076	HCL BigFix SaaS Remediate is affected by a security vulnerability MEDIUM (5.4) The BigFix SaaS's HTTP responses were missing some security headers. The absence of these headers weakens the application's client-side security posture, making it more vulnerable to common web attacks that these headers are designed to mitigate, such as Cross-Site Scripting (XSS), Clickjacking, and protocol downgrade attacks. Published: 2025-12-02T17:59:05.614Z Updated: 2025-12-08T20:05:30.168Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127171	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-52621`	vulnerable	2026-06-08 07:31:12.795536	HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning MEDIUM (5.3) HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning. Published: 2025-08-15T22:45:55.628Z Updated: 2025-08-18T19:00:48.752Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123330	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-52620`	vulnerable	2026-06-08 07:31:12.795007	HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability MEDIUM (4.3) HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability. The image upload functionality inadequately validated the submitted image format. Published: 2025-08-15T22:47:49.433Z Updated: 2025-08-18T14:52:13.448Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123330	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-52619`	vulnerable	2026-06-08 07:31:12.794703	HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure MEDIUM (5.3) HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure. Under certain conditions, error messages disclose sensitive version information about the underlying platform. Published: 2025-08-15T22:48:40.096Z Updated: 2025-08-18T14:51:20.516Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123330	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-52618`	vulnerable	2026-06-08 07:31:12.793550	HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability MEDIUM (4.3) HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability. The vulnerability allows potential attackers to manipulate SQL queries. Published: 2025-08-15T22:49:23.810Z Updated: 2025-08-18T14:50:10.917Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123330	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.