Medium severity4.3NVD Advisory· Published Aug 15, 2025· Updated Jun 17, 2026

CVE-2025-52620

Description

HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability. The image upload functionality inadequately validated the submitted image format.

Affected products

HCL Software/BigFix SaaS Authentication Servicellm-create
HCL Software/BigFix SaaS Remediatev5
Range: < 8.1.14
HCLTech/Bigfix SaaS
cpe:2.3:a:hcltech:bigfix_saas:*:*:*:*:*:*:*:*
Range: <8.1.14

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000