ServiceNow IT Service Management Cross-Site Scripting Vulnerability

ServiceNow IT Service Management ITSM is a set of IT service management tools from ServiceNow, Inc. in the United States. The tool provides incident management, problem management, change and release management and other functions. A cross-site scripting vulnerability exists in ServiceNow IT...

CVE-2019-20768: Improper Neutralization of Input During Web Page Generation

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

PT-2020-10743

Name of the Vulnerable Software and Affected Versions ServiceNow IT Service Management versions Kingston through Patch 14-1 ServiceNow IT Service Management versions London through Patch 7 ServiceNow IT Service Management versions Madrid before patch 4 Description The issue allows stored XSS via...