CVE-2025-52620

HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability. The image upload functionality inadequately validated the submitted image format.

Affected (CNA)

Vendor / product	Versions
HCL Software / BigFix SaaS Remediate	affected < 8.1.14

CWE

CWE-20

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123330

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.