HCL Software Bigfix Webui vulnerabilities

2 vulnerabilities

Known vulnerabilities in HCL Software Bigfix Webui, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2025-52647hcl softwarebigfix webui
EPSS score
0.19%
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks.6.4CVE-2022-38655hcl softwarebigfix webui+1
EPSS score
0.39%
BigFix WebUI non-master operators are missing controls that prevent them from being able to modify the relevance of fixlets or to deploy fixlets from the BES Support external site.