Medium severity4.3NVD Advisory· Published Aug 15, 2025· Updated Jun 17, 2026

CVE-2025-52618

Description

HCL BigFix SaaS Authentication Service is affected by a SQL injection vulnerability. The vulnerability allows potential attackers to manipulate SQL queries.

Affected products

HCLTech/Bigfix SaaS
cpe:2.3:a:hcltech:bigfix_saas:*:*:*:*:*:*:*:*
Range: <8.1.14
HCL Software/BigFix SaaS Authentication Servicellm-create
HCL Software/BigFix SaaS Remediatev5
Range: < 8.1.14

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000