ServiceNow vulnerabilities
34 CVEs and advisories name ServiceNow as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-1209Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.
- CVE-2022-46389Cross-Site Scripting (XSS) vulnerability found on logout functionality
- CVE-2022-46886There exists an open redirect within the response list update functionality of ServiceNow.
- CVE-2022-39048Cross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment_redirect