Description (CNA)
Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ServiceNow / ServiceNow Records | affected 0 before Tokyo Patch 5; affected 0 before Tokyo Patch 4a; affected 0 before San Diego Patch 10; affected 0 before San Diego Patch 9a; affected 0 before Rome Patch 10 Hot Fix 4b; affected 0 before Utah Patch 1 |
CWE
CWE-79
References
- https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1262967
- https://www.linkedin.com/in/osamay/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.