ServiceNow IT Service Management Cross-Site Scripting Vulnerability

ServiceNow IT Service Management ITSM is a set of IT service management tools from ServiceNow, Inc. in the United States. The tool provides incident management, problem management, change and release management and other functions. A cross-site scripting vulnerability exists in ServiceNow IT...

CVE-2019-20768

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

Cross site scripting

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

CVE-2019-20768

CVE-2019-20768 affects ServiceNow IT Service Management ( Kingston through Patch 14-1, London through Patch 7, Madrid before patch 4). The issue is a stored XSS vulnerability triggered by crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do. The connected d...

CVE-2019-20768

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

CVE-2019-20768: Improper Neutralization of Input During Web Page Generation

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

PT-2020-10743

Name of the Vulnerable Software and Affected Versions ServiceNow IT Service Management versions Kingston through Patch 14-1 ServiceNow IT Service Management versions London through Patch 7 ServiceNow IT Service Management versions Madrid before patch 4 Description The issue allows stored XSS via...

Phish of GoDaddy Employee Jeopardized Escrow.com, Among Others

A spear-phishing attack this week hooked a customer service employee at GoDaddy.com, the world's largest domain name registrar, KrebsOnSecurity has learned. The incident gave the phisher the ability to view and modify key customer records, access that was used to change domain settings for a...

MISA expands with new members and new product additions

Another RSA Conference RSAC and another big year for the Microsoft Intelligent Security Association MISA. MISA was launched at RSAC 2018 with 26 members and a year later we had doubled in size to 53 members. Today, I am excited to share that the association has again doubled in size to 102 member...

New Microsoft Security innovations and partnerships

Today on the Official Microsoft Blog, Ann Johnson, Corporate Vice President of the Cybersecurity Solutions Group, shared how Microsoft is helping turn the tide in cybersecurity by putting artificial intelligence AI in the hands of defenders. She announced the general availability of Microsoft...

Information disclosure

The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability...

CVE-2016-1600

The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability...

CVE-2016-1600

The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability...

CVE-2016-1600

CVE-2016-1600 affects the ServiceNow driver in NetIQ Identity Manager prior to version 4.6. The vulnerability is an information disclosure issue. CVSSv3 base score 7.5 (HIGH) with network access, no authentication, and no user interaction required; confidentiality impact is HIGH, others NONE. The...

PT-2019-7815

Name of the Vulnerable Software and Affected Versions NetIQ Identity Manager versions prior to 4.6 Description The issue is related to an information disclosure problem in the ServiceNow driver of NetIQ Identity Manager. Recommendations For versions prior to 4.6, update to version 4.6 or later to...

CVE-2016-1600: Exposure of Sensitive Information to an Unauthorized Actor

The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability...

CVE-2018-7748

reportviewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '$xyz' Glide Scripting Injection in the sysparmmedia parameter...

Sql injection

reportviewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '$xyz' Glide Scripting Injection in the sysparmmedia parameter...

CVE-2018-7748

CVE-2018-7748 affects ServiceNow (Report_viewer.do) on Jakarta releases up to Patch 8, via a Glide Scripting Injection in the sysparm_media parameter. The underlying issue is remote arbitrary code execution. The provided sources identify the vulnerable component as report_viewer.do and the inject...

CVE-2018-7748

reportviewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '$xyz' Glide Scripting Injection in the sysparmmedia parameter...