292 matches found
CVE-2023-3414
CVE-2023-3414 is a Cross-Site Request Forgery vulnerability in the Jenkins Plug-in for ServiceNow DevOps prior to version 1.38.1. Exploitation could lead to exposure of sensitive information via CSRF on form validation without requiring POST? or with improper permission checks. Remediation: upgra...
CVE-2023-3414 Cross-Site Request Forgery (CSRF) in Jenkins Plug-in for ServiceNow DevOps
A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1 version of the Jenkins plug-in for...
Jenkins Plugin ServiceNow DevOps 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin ServiceNow...
Jenkins Plugin ServiceNow DevOps 跨站请求伪造漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin ServiceNow...
PT-2023-24866 · Jenkins · Jenkins Plug-In For Servicenow Devops +1
Name of the Vulnerable Software and Affected Versions: Jenkins Plug-in for ServiceNow DevOps versions prior to 1.38.1 Description: A missing authorization issue exists that could lead to the unwanted exposure of sensitive information if exploited successfully. Recommendations: For versions prior ...
PT-2023-24694 · Jenkins · Jenkins Plug-In For Servicenow Devops +1
Name of the Vulnerable Software and Affected Versions: Jenkins Plug-in for ServiceNow DevOps versions prior to 1.38.1 Description: A cross-site request forgery issue exists that could cause the unwanted exposure of sensitive information if exploited successfully. Recommendations: For versions pri...
CVE-2023-1298
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting XSS vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts...
Cross site scripting
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting XSS vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts...
CVE-2023-1298
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting XSS vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts...
CVE-2023-1298
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting XSS vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts...
CVE-2023-1298
CVE-2023-1298 affects ServiceNow Polaris Layout. A reflected XSS vulnerability could let an authenticated user inject arbitrary scripts. The CVSS v3.1 base score is 6.1 (Medium); vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. Exploitation requires user interaction and has network access, with a ch...
PT-2023-16870 · Servicenow · Servicenow
Name of the Vulnerable Software and Affected Versions: ServiceNow affected versions not specified Description: A Reflected Cross-Site scripting XSS vulnerability was identified in the ServiceNow Polaris Layout. This issue would enable an authenticated user to inject arbitrary scripts...
PT-2023-8493 · Servicenow +1 · Servicenow +1
Name of the Vulnerable Software and Affected Versions: HCL BigFix ServiceNow affected versions not specified Description: The issue is related to incorrect code generation management in the ServiceNow Data Flow platform, allowing a remote attacker to execute arbitrary code. A malicious authorized...
CVE-2022-43684
ServiceNow has released patches and an upgrade that address an Access Control List ACL bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: Quebec prior to Patch 10 Hot Fix 8b Rome prior to Patch 10 Hot Fix 1 San...
Authorization
ServiceNow has released patches and an upgrade that address an Access Control List ACL bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: Quebec prior to Patch 10 Hot Fix 8b Rome prior to Patch 10 Hot Fix 1 San...
CVE-2022-43684 ACL bypass in Reporting functionality
ServiceNow has released patches and an upgrade that address an Access Control List ACL bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: Quebec prior to Patch 10 Hot Fix 8b Rome prior to Patch 10 Hot Fix 1 San...
CVE-2022-43684 ACL bypass in Reporting functionality
ServiceNow has released patches and an upgrade that address an Access Control List ACL bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: Quebec prior to Patch 10 Hot Fix 8b Rome prior to Patch 10 Hot Fix 1 San...
CVE-2022-43684
CVE-2022-43684 describes an ACL bypass in ServiceNow Core functionality. Affected: ServiceNow Quebec (before Patch 10 Hot Fix 8b), Rome (before Patch 10 Hot Fix 1), San Diego (before Patch 7), Tokyo (before Tokyo Patch 1), and Utah (before Utah GA). Impact: authenticated users could access sensit...