CVE-2022-42704

n/a / n/a PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec, Rome, and San Diego allows remote attackers to inject arbitrary web script via the Standard Ticket Conversations widget.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1216141

ADP enrichment

CVE

No English description supplied.

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1216141

CISA-ADP

No English description supplied.

No references supplied.