Cross site scripting

2022-08-2319:15:00

PRIOn knowledge base

www.prio-n.com

servicenow

san diego

patch 3

xss

name field

performance analytics

dashboard

nvd

0.001 Low

EPSS

Percentile

31.3%

JSON

ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard.

CPENameOperatorVersion
servicenoweqsandiego patch3
servicenoweqsandiego patch2hotfix1
servicenoweqsandiego patch2
servicenoweqsandiego patch1hotfix1b
servicenoweqsandiego patch1hotfix1a
servicenoweqsandiego patch1hotfix1
servicenoweqsandiego patch1

Name	Operator	Version
servicenow	eq	sandiego patch3
servicenow	eq	sandiego patch2hotfix1
servicenow	eq	sandiego patch2
servicenow	eq	sandiego patch1hotfix1b
servicenow	eq	sandiego patch1hotfix1a
servicenow	eq	sandiego patch1hotfix1
servicenow	eq	sandiego patch1

References

support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1122640

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for PRION:CVE-2022-38172