CVE-2018-7748: Improper Control of Generation of Code

reportviewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '$xyz' Glide Scripting Injection in the sysparmmedia parameter...

PT-2018-18255

Name of the Vulnerable Software and Affected Versions: ServiceNow versions prior to Release Jakarta Patch 8 Description: The issue allows remote attackers to execute arbitrary code via '$xyz' Glide Scripting Injection in the sysparm media parameter of the report viewer.do endpoint. Recommendation...

ServiceNow ITSM Cross-Site Scripting Vulnerability

ServiceNow ITSM is an IT service management system. The system features incident management, problem management, asset and cost management. A cross-site scripting vulnerability exists in ServiceNow ITSM version 2016-06-02. A remote attacker can exploit the vulnerability to obtain cookies for othe...

Code injection

ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile aka navpage.do, or the Search bar of My Portal aka searchresults.do...

CVE-2018-8720

ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile aka navpage.do, or the Search bar of My Portal aka searchresults.do...

CVE-2018-8720

ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile aka navpage.do, or the Search bar of My Portal aka searchresults.do...

CVE-2018-8720

The vulnerability CVE-2018-8720 affects ServiceNow ITSM 2016-06-02 . A cross-site scripting (XSS) flaw exists in the web interface via the First Name/Last Name fields in My Profile (navpage.do) or the Search bar in My Portal (search_results.do) . Publicly documented entries (NVD, CNVD, CVE lists)...

CVE-2018-8720: Improper Neutralization of Input During Web Page Generation

ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile aka navpage.do, or the Search bar of My Portal aka searchresults.do...

PT-2018-18598

Name of the Vulnerable Software and Affected Versions ServiceNow ITSM version 2016-06-02 Description The issue concerns a cross-site scripting XSS problem. It can be triggered via the First Name or Last Name field of My Profile, or the Search bar of My Portal. Recommendations For version...

community.servicenow.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-455095 Description| Value ---|--- Affected Website:| community.servicenow.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat She...

community.servicenow.com XSS vulnerability

Open Bug Bounty ID: OBB-361054 Description| Value ---|--- Affected Website:| community.servicenow.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Remediation Workflow Now Integrates with ServiceNow

Today were sharing an update to Remediation Workflow Ticketing capabilities. We are pleased to announce that Remediation Workflow in InsightVM now integrates with ServiceNow. One of the main benefits of Remediation Workflow Ticketing is to improve collaboration between security and remediation...

Randstad Group Selects Trend Micro to Protect its Public Cloud Infrastructure

The Randstad Group is currently in the process of consolidating and centralizing its IT infrastructure across 30 IT departments, and will be providing service to more than 40 operating countries across four continents. To ensure the new infrastructure will have optimal security the company select...

NetIQ IDM ServiceNow Driver Information Disclosure Vulnerability

NetIQ IDM is a suite of user authentication management software from NetIQ, Inc. ServiceNow Driver is one of the software programs that provides cloud-based services and supports users to manage users through Web services. An information disclosure vulnerability exists in NetIQ IDM ServiceNow...

CVE-2016-1603

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

Information disclosure

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

CVE-2016-1603

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

CVE-2016-1603

NetIQ IDM ServiceNow Driver before version 1.0.0.1 exposes cryptographic attributes to logged-in users, enabling information disclosure. The vulnerability is documented in CVE-2016-1603 and described across multiple sources (NVD entry and CNVD entry), indicating an information leak in that driver...

CVE-2016-1603

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...

CVE-2016-1603: Exposure of Sensitive Information to an Unauthorized Actor

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users...