4.3
Medium
CVE-2025-52618 HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
Description
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability. The vulnerability allows potential attackers to manipulate SQL queries.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix SaaS Remediate 8.1 | earliest → < 8.1.14 | 8.1.14 |
Other CVEs of BigFix SaaS Remediate
The 5 CVEs of BigFix SaaS Remediate →
CVE-2025-52622
The BigFix SaaS's HTTP responses were missing some security headers
5.4
Medium
CVE-2025-52619
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure
5.3
Medium
CVE-2025-52620
HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability
4.3
Medium
CVE-2025-52621
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
5.3
Medium