Known vulnerabilities in HCL Software BigFix WebUI
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-52647 | The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host… | 6.1 Medium | Oct 10, 2025 |
| CVE-2022-38655 | BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of… | 6.4 Medium | Dec 20, 2022 |