CVE-2025-52622 — HCL BigFix SaaS Remediate is affected by a security vulnerability
The BigFix SaaS's HTTP responses were missing some security headers. The absence of these headers weakens the application's client-side security posture, making it more vulnerab…
Published: 2025-12-02 · CVSS: 5.4 · CVSS 3.1
The BigFix SaaS's HTTP responses were missing some security headers. The absence of these headers weakens the application's client-side security posture, making it more vulnerable to common web attacks that these headers are designed to mitigate, such as Cross-Site Scripting (XSS), Clickjacking, and protocol downgrade attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7