Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:08 a.m.•21 views

CVE-2019-20768

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

5.4CVSS5.7AI score0.00719EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-11307

Malware in sbrugna...

5.4CVSS5.5AI score0.00719EPSS
SaveExploits1References3
NVD
NVD
•added 2020/05/05 10:15 p.m.•24 views

CVE-2019-20768

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

5.4CVSS5.3AI score0.00719EPSS
SaveExploits1References2
Prion
Prion
•added 2020/05/05 10:15 p.m.•20 views

Cross site scripting

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

3.5CVSS5.2AI score0.00719EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/05/05 9:13 p.m.•29 views

CVE-2019-20768

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

5.3AI score0.00719EPSS
SaveExploits1References2
CVE
CVE
•added 2020/05/05 9:13 p.m.•59 views

CVE-2019-20768

CVE-2019-20768 affects ServiceNow IT Service Management ( Kingston through Patch 14-1, London through Patch 7, Madrid before patch 4). The issue is a stored XSS vulnerability triggered by crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do. The connected d...

5.4CVSS5.2AI score0.00719EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/05 12:00 a.m.•2 views

CVE-2019-20768: Improper Neutralization of Input During Web Page Generation

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparmitemguid and sysid parameters in an Incident Request to servicecatalog.do...

5.4CVSS6AI score0.00719EPSS
SaveExploits1References2
Rows per page
Query Builder