PT-2025-41612 · Ibm · Bigfix Webui

Published 2025-10-10 · Updated 2025-10-11 · CVE-2025-52647

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BigFix WebUI (affected versions not specified)

Description The BigFix WebUI application is susceptible to Host Header Poisoning Attacks. The application responds with HOST information from the HTTP header field.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-644

Related Identifiers

CVE-2025-52647

Affected Products

Bigfix Webui

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-52647 · Security Note
• https://twitter.com/CVEnew/status/1976780281844486469 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1976896499037474981 · Twitter Post
• https://t.me/cveNotify/138292 · Telegram Post
• https://t.me/CVEtracker/34624 · Telegram Post
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124562 · Note