CVE-2025-52647: Hcl Software Bigfix Webui

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks.

Affected products

• Hcl Software Bigfix Webui: version v11 only

Published 2025-10-10. Last modified 2026-10-08.