HCL BigFix Service Management (SM) has a security misconfiguration vulnerability related to its Content Security Policy (CSP) header. This misconfiguration could enable attackers to inject malicious scripts, increasing the risk of cross-site scripting (XSS) and potential exposure of sensitive information. The vulnerability has a low CVSS score of 3.7, indicating limited impact. No affected versions or patches are specified in the available data.