Security Advisory

CVE-2025-52620

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-15 22:47:49
Last updated 2025-08-18 14:52:13
Assigner HCL
CVSS score 4.3
State PUBLISHED

Description

HCL BigFix SaaS Authentication Service is affected by a Cross-Site Scripting (XSS) vulnerability. The image upload functionality inadequately validated the submitted image format.