CVE-2025-52647CWE-644
CVE-2025-52647
Medium · published October 11, 2025
What it is
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks.
The record
Technical detail
- CVSS v3.1
- 6.1 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00194 · 8.7th percentile
- Weakness
- CWE-644 · Improper Neutralization of HTTP Headers for Scripting Syntax
- Published
- 2025-10-11T03:15Z
References (1)
EPSS history
Timeline