4.3
Medium
CVE-2025-52620 HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability
Description
HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability. The image upload functionality inadequately validated the submitted image format.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix SaaS Remediate 8.1 | earliest → < 8.1.14 | 8.1.14 |
Other CVEs of BigFix SaaS Remediate
The 5 CVEs of BigFix SaaS Remediate →
CVE-2025-52622
The BigFix SaaS's HTTP responses were missing some security headers
5.4
Medium
CVE-2025-52618
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
4.3
Medium
CVE-2025-52619
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure
5.3
Medium
CVE-2025-52621
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
5.3
Medium