5.4
Moyenne
CVE-2025-52622 The BigFix SaaS's HTTP responses were missing some security headers
Description
The BigFix SaaS's HTTP responses were missing some security headers. The absence of these headers weakens the application's client-side security posture, making it more vulnerable to common web attacks that these headers are designed to mitigate, such as Cross-Site Scripting (XSS), Clickjacking, and protocol downgrade attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BigFix SaaS Remediate | 0 | Pas de correctif indiqué |
Autres CVE de BigFix SaaS Remediate
Les 5 CVE de BigFix SaaS Remediate →
CVE-2025-52618
HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability
4.3
Moyenne
CVE-2025-52619
HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure
5.3
Moyenne
CVE-2025-52620
HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability
4.3
Moyenne
CVE-2025-52621
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
5.3
Moyenne