PT-2026-37637 · Hcl · Bigfix Service Management

Published 2026-05-06 · Updated 2026-05-06 · CVE-2025-31984

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management (SM) (affected versions not specified)

Description A security misconfiguration exists due to a missing or insecure "X-Content-Type-Options" header. This allows browsers to perform MIME-type sniffing, which is a technique where the browser attempts to determine the content type of a response by inspecting its body rather than relying on the declared content type, potentially causing malicious content to be interpreted and executed incorrectly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-31984

Affected Products

Bigfix Service Management

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-31984 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128144 · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2052038473196990755 · Twitter Post
• https://twitter.com/CVEnew/status/2052037437837508697 · Twitter Post
• https://t.me/CVEtracker/52873 · Telegram Post