CVSS 6.1 · Medium EPSS 1,1%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada servicenow. Skor CVSS 3.1 6.1 (Medium) menurut NVD.
A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an attacker would need to persuade an authenticated user to click a maliciously crafted URL. Successful exploitation potentially could be used to conduct various client-side attacks, including, but not limited to, phishing, redirection, theft of CSRF tokens, and use of an authenticated user's browser or session to attack other systems.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| servicenow | servicenow | Versi quebec |
| servicenow | servicenow | Versi quebec patch_10 |
| servicenow | servicenow | Versi rome patch_1 |
| servicenow | servicenow | Versi rome patch_1_hotfix_1 |
| servicenow | servicenow | Versi rome patch_1_hotfix_1b |
| servicenow | servicenow | Versi rome patch_1_hotfix_2 |
| servicenow | servicenow | Versi rome patch_1_hotfix_3 |
| servicenow | servicenow | Versi rome patch_10 |
| servicenow | servicenow | Versi rome patch_10_hotfix_1 |
| servicenow | servicenow | Versi rome patch_10_hotfix_2 |
| servicenow | servicenow | Versi rome patch_10_hotfix_2a |
| servicenow | servicenow | Versi rome patch_2 |
| servicenow | servicenow | Versi rome patch_2_hotfix_1 |
| servicenow | servicenow | Versi rome patch_2_hotfix_2 |
| servicenow | servicenow | Versi rome patch_3 |
| servicenow | servicenow | Versi rome patch_3_hotfix_1 |
| servicenow | servicenow | Versi rome patch_4 |
| servicenow | servicenow | Versi rome patch_4_hotfix_1 |
| servicenow | servicenow | Versi rome patch_4_hotfix_1a |
| servicenow | servicenow | Versi rome patch_4_hotfix_1b |
| servicenow | servicenow | Versi rome patch_5 |
| servicenow | servicenow | Versi rome patch_5_hotfix_1 |
| servicenow | servicenow | Versi rome patch_5_hotfix_2 |
| servicenow | servicenow | Versi rome patch_6 |
| servicenow | servicenow | Versi rome patch_6_hotfix_1 |
| servicenow | servicenow | Versi rome patch_6_hotfix_2 |
| servicenow | servicenow | Versi rome patch_7 |
| servicenow | servicenow | Versi rome patch_7_hotfix_1 |
| servicenow | servicenow | Versi rome patch_7a |
| servicenow | servicenow | Versi rome patch_7b |
| servicenow | servicenow | Versi rome patch_8 |
| servicenow | servicenow | Versi rome patch_8_hotfix_1 |
| servicenow | servicenow | Versi rome patch_8_hotfix_2 |
| servicenow | servicenow | Versi rome patch_9 |
| servicenow | servicenow | Versi rome patch_9_hotfix_1 |
| servicenow | servicenow | Versi rome patch_9a |
| servicenow | servicenow | Versi rome patch_9b |
| servicenow | servicenow | Versi san_diego patch_1 |
| servicenow | servicenow | Versi san_diego patch_1_hotfix_1 |
| servicenow | servicenow | Versi san_diego patch_1_hotfix_1a |
| servicenow | servicenow | Versi san_diego patch_1_hotfix_1b |
| servicenow | servicenow | Versi san_diego patch_2 |
| servicenow | servicenow | Versi san_diego patch_2_hotfix_1 |
| servicenow | servicenow | Versi san_diego patch_3 |
| servicenow | servicenow | Versi san_diego patch_3_hotfix_1 |
| servicenow | servicenow | Versi san_diego patch_3_hotfix_2 |
| servicenow | servicenow | Versi san_diego patch_3_hotfix_3 |
| servicenow | servicenow | Versi san_diego patch_3_hotfix_4 |
| servicenow | servicenow | Versi san_diego patch_4 |
| servicenow | servicenow | Versi san_diego patch_4a |
| servicenow | servicenow | Versi san_diego patch_4b |
| servicenow | servicenow | Versi san_diego patch_6 |
| servicenow | servicenow | Versi san_diego patch_7 |
| servicenow | servicenow | Versi san_diego patch_8 |
| servicenow | servicenow | Versi tokyo |
| servicenow | servicenow | Versi tokyo patch1 |
| servicenow | servicenow | Versi utah |