5.3
Medium
CVE-2025-52621 HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
Description
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix SaaS Remediate 8.1 | earliest → < 8.1.14 | 8.1.14 |
Other CVEs of BigFix SaaS Remediate
The 5 CVEs of BigFix SaaS Remediate →
CVE-2025-52622
The BigFix SaaS's HTTP responses were missing some security headers
5.4
Medium
CVE-2025-52618
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
4.3
Medium
CVE-2025-52619
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure
5.3
Medium
CVE-2025-52620
HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability
4.3
Medium