Lucene search
+L

CVE-2022-46389

🗓️ 17 Apr 2023 00:00:00Reported by SNType 
cve
 cve
🔗 web.nvd.nist.gov👁 45 Views

There's a reflected XSS in ServiceNow versions below Quebec Patch 10 Hotfix 11b, Rome Patch 10 Hotfix 3b, San Diego Patch 9, Tokyo Patch 4, and Utah GA

Related
Detection
Affected
Refs
NVD
Node
OR
servicenowservicenowMatchromeearly_availability
servicenowservicenowMatchromepatch_1
servicenowservicenowMatchromepatch_1_hotfix_1a
servicenowservicenowMatchromepatch_1_hotfix_1b
servicenowservicenowMatchromepatch_10
servicenowservicenowMatchromepatch_2
servicenowservicenowMatchromepatch_3
servicenowservicenowMatchromepatch_4
servicenowservicenowMatchromepatch_4_hotfix_1
servicenowservicenowMatchromepatch_4_hotfix_1a
servicenowservicenowMatchromepatch_4_hotfix_1b
servicenowservicenowMatchromepatch_5
servicenowservicenowMatchromepatch_6
servicenowservicenowMatchromepatch_7
servicenowservicenowMatchromepatch_7a
servicenowservicenowMatchromepatch_7b
servicenowservicenowMatchromepatch_8
servicenowservicenowMatchromepatch_9
servicenowservicenowMatchromepatch_9a
servicenowservicenowMatchsan_diego-
servicenowservicenowMatchsan_diegopatch_1
servicenowservicenowMatchsan_diegopatch_1_hotfix_1
servicenowservicenowMatchsan_diegopatch_1_hotfix_1a
servicenowservicenowMatchsan_diegopatch_1_hotfix_1b
servicenowservicenowMatchsan_diegopatch_2
servicenowservicenowMatchsan_diegopatch_3
servicenowservicenowMatchsan_diegopatch_4
servicenowservicenowMatchsan_diegopatch_4a
servicenowservicenowMatchsan_diegopatch_4b
servicenowservicenowMatchsan_diegopatch_5
servicenowservicenowMatchsan_diegopatch_6
servicenowservicenowMatchsan_diegopatch_7
servicenowservicenowMatchsan_diegopatch_7b
servicenowservicenowMatchsan_diegopatch_8
servicenowservicenowMatchtokyoearly_availability
servicenowservicenowMatchtokyopatch_1
servicenowservicenowMatchtokyopatch_1a
servicenowservicenowMatchtokyopatch_1b
servicenowservicenowMatchtokyopatch_2
servicenowservicenowMatchtokyopatch_3
servicenowservicenowMatchutahearly_availability
servicenowservicenowMatchutahpatch_1
servicenowservicenowMatchutahpatch_2
[
  {
    "vendor": "ServiceNow",
    "product": "Now Platform",
    "versions": [
      {
        "version": "Quebec",
        "status": "affected",
        "lessThan": "Patch 10 Hotfix 11b",
        "versionType": "custom"
      },
      {
        "version": "Rome",
        "status": "affected",
        "lessThan": "Patch 10 Hotfix 3b",
        "versionType": "custom"
      },
      {
        "version": "San Diego",
        "status": "affected",
        "lessThan": "Patch 9",
        "versionType": "custom"
      },
      {
        "version": "Tokyo",
        "status": "affected",
        "lessThan": "Patch 4",
        "versionType": "custom"
      },
      {
        "version": "Utah",
        "status": "affected",
        "lessThan": "GA",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 05:11Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.16.1
EPSS0.00595
SSVC
45