CVE-2019-20768

CVE-2019-20768 affects ServiceNow IT Service Management ( Kingston through Patch 14-1, London through Patch 7, Madrid before patch 4). The issue is a stored XSS vulnerability triggered by crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do. The connected d...

CVE-2018-8720

The vulnerability CVE-2018-8720 affects ServiceNow ITSM 2016-06-02 . A cross-site scripting (XSS) flaw exists in the web interface via the First Name/Last Name fields in My Profile (navpage.do) or the Search bar in My Portal (search_results.do) . Publicly documented entries (NVD, CNVD, CVE lists)...