3.7
/ 10
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
Description
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MIME-type sniffing, potentially causing malicious content to be interpreted and executed incorrectly.
Basic Information
ID
CVE-2025-31985
Source
HCL
Published
May 20, 2026 at 11:28
Modified
May 20, 2026 at 12:50
Affected Product
Vendor
HCL
Product
BigFix Service Management (SM)
Version
23
Affected Versions
HCL BigFix Service Management (SM) 23