Open redirect

2023-04-1420:15:00

PRIOn knowledge base

www.prio-n.com

open redirect

servicenow

nvd

attackers

arbitrary domains

0.0005 Low

EPSS

Percentile

18.2%

JSON

There exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redirect users to arbitrary domains when clicking on a URL within a service-now domain.

CPENameOperatorVersion
servicenoweqsandiego patch3
servicenoweqsandiego patch2hotfix1
servicenoweqsandiego patch2
servicenoweqsandiego patch1hotfix1b
servicenoweqsandiego patch1hotfix1a
servicenoweqsandiego patch1hotfix1
servicenoweqsandiego patch1
servicenoweqsandiego patch6
servicenoweqsandiego patch4
servicenoweqsandiego patch4a

Name	Operator	Version
servicenow	eq	sandiego patch3
servicenow	eq	sandiego patch2hotfix1
servicenow	eq	sandiego patch2
servicenow	eq	sandiego patch1hotfix1b
servicenow	eq	sandiego patch1hotfix1a
servicenow	eq	sandiego patch1hotfix1
servicenow	eq	sandiego patch1
servicenow	eq	sandiego patch6
servicenow	eq	sandiego patch4
servicenow	eq	sandiego patch4a

Rows per page:

1-10 of 541

References

support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1219857

0.0005 Low

EPSS

Percentile

18.2%

JSON

Related for PRION:CVE-2022-46886