Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-1209

Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SN

Description

Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ServiceNow ServiceNow Records

Default version status: unaffected

  • 0 to < Tokyo Patch 5affected
  • 0 to < Tokyo Patch 4aaffected
  • 0 to < San Diego Patch 10affected
  • 0 to < San Diego Patch 9aaffected
  • 0 to < Rome Patch 10 Hot Fix 4baffected
  • 0 to < Utah Patch 1affected

References