Description (CNA)
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ServiceNow / Now User Experience | affected 0 before San Diego Patch 10; affected 0 before Tokyo Patch 4b; affected 0 before Tokyo Patch 6; affected 0 before Utah Patch 1 |
CWE
CWE-79
References
- https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1310230
- https://www.linkedin.com/in/osamay/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.