5.4
Medium
CVE-2025-52622 The BigFix SaaS's HTTP responses were missing some security headers
Description
The BigFix SaaS's HTTP responses were missing some security headers. The absence of these headers weakens the application's client-side security posture, making it more vulnerable to common web attacks that these headers are designed to mitigate, such as Cross-Site Scripting (XSS), Clickjacking, and protocol downgrade attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix SaaS Remediate | 0 | No fix stated |
Other CVEs of BigFix SaaS Remediate
The 5 CVEs of BigFix SaaS Remediate →
CVE-2025-52618
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
4.3
Medium
CVE-2025-52619
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure
5.3
Medium
CVE-2025-52620
HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability
4.3
Medium
CVE-2025-52621
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
5.3
Medium