Bigfix Saas (Hcltech) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-08-15. Vendor: Hcltech.

CVEs of Bigfix Saas

• CVE-2025-52620 - CVSS 5.4 (medium), 2025-08-15: HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability. The image upload functionality inadequately validated the…
• CVE-2025-52619 - CVSS 5.3 (medium), 2025-08-15: HCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure. Under certain conditions, error messages disclose sensitive version…
• CVE-2025-52618 - CVSS 9.8 (critical), 2025-08-15: HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability. The vulnerability allows potential attackers to manipulate SQL queries.
• CVE-2025-52621 - CVSS 7.5 (high), 2025-08-15: HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.  The BigFix SaaS's HTTP responses were observed to include the Origin header. Its…