CVE-2025-31985

Description

HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MIME-type sniffing, potentially causing malicious content to be interpreted and executed incorrectly.

CVSS Vector

Affected Products

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144