10 matches found
EUVD-2022-40768
Malicious code in bioql PyPI...
CVE-2022-38172
ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard...
CVE-2022-38172
ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard...
CVE-2022-38172
ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard...
CVE-2022-38172
ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard...
Cross site scripting
ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard...
CVE-2022-38172
CVE-2022-38172 is a documented XSS in ServiceNow’s Performance Analytics dashboard creation via the name field, affecting versions up to San Diego Patch 3. The NVD entry lists CVSS v3.1 metrics: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N with a base score of 6.1 (Medium). Public references indicate the ...
CVE-2022-38172
ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard...
ServiceNow San Diego Patch 跨站脚本漏洞
ServiceNow San Diego Patch is a series of patches from ServiceNow USA. A cross-site scripting vulnerability exists in ServiceNow San Diego Patch 3 and prior versions, which stems from allowing XSS via the name field when creating new dashboards for the Performance Analytics Dashboard...
PT-2022-24257 · Servicenow · Servicenow
Name of the Vulnerable Software and Affected Versions: ServiceNow versions through San Diego Patch 3 Description: The issue allows for XSS via the name field during the creation of a new dashboard for the Performance Analytics dashboard. Recommendations: For versions through San Diego Patch 3,...