What’s Vulnerable › Vulnerabilities
CVE-2025-52621: HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-08-15 · updated 2026-06-17
- Weakness: CWE-346
Description
HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.
Affected products
- HCL Software BigFix SaaS Remediate: before 8.1.14 — fixed in 8.1.14
How to fix
Upgrade to a fixed version: HCL Software BigFix SaaS Remediate 8.1.14. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-52621 or the next vulnerability affects your stack