Description
A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an attacker would need to persuade an authenticated user to click a maliciously crafted URL. Successful exploitation potentially could be used to conduct various client-side attacks, including, but not limited to, phishing, redirection, theft of CSRF tokens, and use of an authenticated user's browser or session to attack other systems.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Servicenow Now Platform
Default version status: unaffected
Tokyo to < Patch 1aaffectedSan Diego to < Patch 7baffectedRome to < Patch 10 Hotfix 2baffectedQuebec to < Patch 10 Hotfix 10baffected