Host Header Poisoning Vulnerability in BigFix WebUI by HCL Software

CVE-2025-52647

What is CVE-2025-52647?

The BigFix WebUI application is susceptible to Host Header Poisoning attacks due to the improper handling of HOST information from the HTTP header field. Attackers could exploit this vulnerability to manipulate the server's response, potentially leading to misdirection or other malicious activities. It’s crucial for users to take proactive measures to secure their applications against such vulnerabilities to maintain the integrity and availability of their systems. For further information, please refer to HCL Software's official guidance.

References