Cross site scripting

2023-07-0618:15:00

PRIOn knowledge base

www.prio-n.com

servicenow

upgrade

patches

reflected cross-site scripting

polaris layout

authenticated user

arbitrary scripts

0.001 Low

EPSS

Percentile

29.1%

JSON

ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts.

CPENameOperatorVersion
servicenoweqsandiego patch3
servicenoweqsandiego patch2hotfix1
servicenoweqsandiego patch2
servicenoweqsandiego patch1hotfix1b
servicenoweqsandiego patch1hotfix1a
servicenoweqsandiego patch1hotfix1
servicenoweqsandiego patch1
servicenoweqsandiego patch6
servicenoweqsandiego patch4
servicenoweqsandiego patch4a

Name	Operator	Version
servicenow	eq	sandiego patch3
servicenow	eq	sandiego patch2hotfix1
servicenow	eq	sandiego patch2
servicenow	eq	sandiego patch1hotfix1b
servicenow	eq	sandiego patch1hotfix1a
servicenow	eq	sandiego patch1hotfix1
servicenow	eq	sandiego patch1
servicenow	eq	sandiego patch6
servicenow	eq	sandiego patch4
servicenow	eq	sandiego patch4a