csirt@kutim:~/threat-intel/cve/CVE-2023-1209

Katalog CVE

CVSS 5.4 · Medium EPSS 0,38%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada servicenow. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.

Rincian

Terbit di NVD
23 Mei 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,38% peluang dieksploitasi; lebih tinggi dari 29,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
servicenow servicenow Versi rome
servicenow servicenow Versi rome patch_1
servicenow servicenow Versi rome patch_1_hotfix_1
servicenow servicenow Versi rome patch_1_hotfix_1a
servicenow servicenow Versi rome patch_1_hotfix_1b
servicenow servicenow Versi rome patch_1_hotfix_2
servicenow servicenow Versi rome patch_10
servicenow servicenow Versi rome patch_10_hotfix_1
servicenow servicenow Versi rome patch_10_hotfix_2
servicenow servicenow Versi rome patch_10_hotfix_2a
servicenow servicenow Versi rome patch_10_hotfix_2b
servicenow servicenow Versi rome patch_10_hotfix_3b
servicenow servicenow Versi rome patch_2
servicenow servicenow Versi rome patch_3
servicenow servicenow Versi rome patch_3_hotfix_1
servicenow servicenow Versi rome patch_4
servicenow servicenow Versi rome patch_4_hotfix_1
servicenow servicenow Versi rome patch_4_hotfix_1a
servicenow servicenow Versi rome patch_4_hotfix_1b
servicenow servicenow Versi rome patch_5
servicenow servicenow Versi rome patch_5_hotfix_1
servicenow servicenow Versi rome patch_5_hotfix_2
servicenow servicenow Versi rome patch_6
servicenow servicenow Versi rome patch_6_hotfix_1
servicenow servicenow Versi rome patch_6_hotfix_2
servicenow servicenow Versi rome patch_7_hotfix_1
servicenow servicenow Versi rome patch_7a
servicenow servicenow Versi rome patch_7b
servicenow servicenow Versi rome patch_8
servicenow servicenow Versi rome patch_8_hotfix_1
servicenow servicenow Versi rome patch_8_hotfix_2
servicenow servicenow Versi rome patch_9
servicenow servicenow Versi rome patch_9_hotfix_1
servicenow servicenow Versi rome patch_9a
servicenow servicenow Versi rome patch_9b
servicenow servicenow Versi san_diego
servicenow servicenow Versi san_diego patch_1
servicenow servicenow Versi san_diego patch_1_hotfix_1
servicenow servicenow Versi san_diego patch_1_hotfix_1a
servicenow servicenow Versi san_diego patch_1_hotfix_1b
servicenow servicenow Versi san_diego patch_2
servicenow servicenow Versi san_diego patch_2_hotfix_1
servicenow servicenow Versi san_diego patch_3
servicenow servicenow Versi san_diego patch_3_hotfix_1
servicenow servicenow Versi san_diego patch_3_hotfix_2
servicenow servicenow Versi san_diego patch_3_hotfix_3
servicenow servicenow Versi san_diego patch_3_hotfix_4
servicenow servicenow Versi san_diego patch_4
servicenow servicenow Versi san_diego patch_4a
servicenow servicenow Versi san_diego patch_6
servicenow servicenow Versi san_diego patch_7
servicenow servicenow Versi san_diego patch_7_hotfix_1
servicenow servicenow Versi san_diego patch_7_hotfix_2
servicenow servicenow Versi san_diego patch_7_hottix_3
servicenow servicenow Versi san_diego patch_7a
servicenow servicenow Versi san_diego patch_7b
servicenow servicenow Versi san_diego patch_8
servicenow servicenow Versi san_diego patch_8_hotfix_1
servicenow servicenow Versi san_diego patch_8_hotfix_2
servicenow servicenow Versi san_diego patch_9

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 77 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.