What is CVE-2025-52621?

CVE-2025-52621 is a medium-severity vulnerability in Hcl Software Bigfix Saas Remediate, classified under Origin Validation Error. CVSS score: 5.3/10. Published 2025-08-15.

How severe is CVE-2025-52621?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Hcl Software Bigfix Saas Remediate

CVE-2025-52621

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning. The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces…

EPSS: 0.001 (4.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Hcl Software Bigfix Saas Remediate — versions < 8.1.14
Hcltech Bigfix_saas

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

psirt@hcl.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-52621?: CVE-2025-52621 is a medium-severity vulnerability in Hcl Software Bigfix Saas Remediate, classified under Origin Validation Error. CVSS score: 5.3/10. Published 2025-08-15.
How severe is CVE-2025-52621?: Medium severity. CVSS v3 base score is 5.3 out of 10.