Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MIME-type sniffing, potentially causing malicious content to be interpreted and executed incorrectly.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-31984 HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers… https://www.cve.org/CVERecord?id=CVE-2025-31984
Post summary
The CVE describes a misconfiguration (missing X-Content-Type-Options header) in HCL BigFix Service Management that could affect browsers, with no PoC, exploit, patch, or active exploitation reported.
🚨*CVE* CVE-2025-31984 HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers… https://www.cve.org/CVERecord?id=CVE-2025-31984 ----- Traducción: CVE-2025-31984 HCL… http://infoflow.cloud`
Post summary
CVE‑2025‑31984 reveals a missing X‑Content‑Type‑Options header in HCL BigFix Service Management, potentially allowing browsers to be exposed to security risks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hcltech | bigfix_service_management | 23.0 | - | - |