CVE-2025-52622: Hcl Software Bigfix Saas Remediate

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

The BigFix SaaS's HTTP responses were missing some security headers. The absence of these headers weakens the application's client-side security posture, making it more vulnerable to common web attacks that these headers are designed to mitigate, such as Cross-Site Scripting (XSS), Clickjacking, and protocol downgrade attacks.

Affected products

• Hcl Software Bigfix Saas Remediate: version 0 only

Published 2025-12-02. Last modified 2026-06-17.