CVE-2022-46886

servicenow

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-46886

Katalog CVE

CVSS 6.1 · Medium EPSS 0,30%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada servicenow. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

There exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redirect users to arbitrary domains when clicking on a URL within a service-now domain.

Rincian

Terbit di NVD
14 April 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
EPSS (30 hari)
0,30% peluang dieksploitasi; lebih tinggi dari 20,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
servicenow servicenow Versi quebec
servicenow servicenow Versi quebec patch_10
servicenow servicenow Versi rome patch_1
servicenow servicenow Versi rome patch_1_hotfix_1
servicenow servicenow Versi rome patch_1_hotfix_1b
servicenow servicenow Versi rome patch_1_hotfix_2
servicenow servicenow Versi rome patch_1_hotfix_3
servicenow servicenow Versi rome patch_10
servicenow servicenow Versi rome patch_10_hotfix_1
servicenow servicenow Versi rome patch_10_hotfix_2
servicenow servicenow Versi rome patch_10_hotfix_2a
servicenow servicenow Versi rome patch_2
servicenow servicenow Versi rome patch_2_hotfix_1
servicenow servicenow Versi rome patch_2_hotfix_2
servicenow servicenow Versi rome patch_3
servicenow servicenow Versi rome patch_3_hotfix_1
servicenow servicenow Versi rome patch_4
servicenow servicenow Versi rome patch_4_hotfix_1
servicenow servicenow Versi rome patch_4_hotfix_1a
servicenow servicenow Versi rome patch_4_hotfix_1b
servicenow servicenow Versi rome patch_5
servicenow servicenow Versi rome patch_5_hotfix_1
servicenow servicenow Versi rome patch_5_hotfix_2
servicenow servicenow Versi rome patch_6
servicenow servicenow Versi rome patch_6_hotfix_1
servicenow servicenow Versi rome patch_6_hotfix_2
servicenow servicenow Versi rome patch_7
servicenow servicenow Versi rome patch_7_hotfix_1
servicenow servicenow Versi rome patch_7a
servicenow servicenow Versi rome patch_7b
servicenow servicenow Versi rome patch_8
servicenow servicenow Versi rome patch_8_hotfix_1
servicenow servicenow Versi rome patch_8_hotfix_2
servicenow servicenow Versi rome patch_9
servicenow servicenow Versi rome patch_9_hotfix_1
servicenow servicenow Versi rome patch_9a
servicenow servicenow Versi rome patch_9b
servicenow servicenow Versi san_diego patch_1
servicenow servicenow Versi san_diego patch_1_hotfix_1
servicenow servicenow Versi san_diego patch_1_hotfix_1a
servicenow servicenow Versi san_diego patch_1_hotfix_1b
servicenow servicenow Versi san_diego patch_2
servicenow servicenow Versi san_diego patch_2_hotfix_1
servicenow servicenow Versi san_diego patch_3
servicenow servicenow Versi san_diego patch_3_hotfix_1
servicenow servicenow Versi san_diego patch_3_hotfix_2
servicenow servicenow Versi san_diego patch_3_hotfix_3
servicenow servicenow Versi san_diego patch_3_hotfix_4
servicenow servicenow Versi san_diego patch_4
servicenow servicenow Versi san_diego patch_4a
servicenow servicenow Versi san_diego patch_4b
servicenow servicenow Versi san_diego patch_6
servicenow servicenow Versi san_diego patch_7
servicenow servicenow Versi san_diego patch_8
servicenow servicenow Versi tokyo
servicenow servicenow Versi tokyo patch1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.