Beveiligingsadvies

CVE-2022-42704

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-01-12 00:00:00
Laatst bijgewerkt 2025-04-09 13:13:40
Toegewezen door mitre
CVSS-score 5.4
Status PUBLISHED

Beschrijving

A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec, Rome, and San Diego allows remote attackers to inject arbitrary web script via the Standard Ticket Conversations widget.