CVE-2025-31985

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management (SM) (affected versions not specified)

Description A security misconfiguration exists due to a missing or insecure X-Content-Type-Options header. This allows browsers to perform MIME-type sniffing, which is a process where the browser attempts to determine the file type by inspecting the content rather than relying on the declared content type. This behavior could lead to malicious content being interpreted and executed incorrectly by the browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.