Bigfix Saas vulnerabilities

2 known vulnerabilities in Bigfix Saas from HCL Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  BigFix SaaS Remediate: Origin Validation Error

  CVE-2025-52621Aug 15, 2025HCL Software

  HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache p

• 9.8 Critical severity

  BigFix SaaS Remediate: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-52618Aug 15, 2025HCL Software

  HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability. The vulnerability allows potential attackers to manipulate SQL queries.