Cross-Site Scripting Vulnerabilities in ServiceNow by ServiceNow
CVE-2023-1209

4.3MEDIUM

Key Information:

Vendor

Servicenow

Status
Servicenow Records
Vendor
CVE Published:
23 May 2023

What is CVE-2023-1209?

Cross-Site Scripting (XSS) vulnerabilities have been identified in ServiceNow records that enable authenticated attackers to inject arbitrary scripts. This could allow these attackers to execute malicious scripts in the context of a user's browser, potentially compromising sensitive information or altering user interactions. Organizations using ServiceNow should take comprehensive security measures to mitigate these vulnerabilities and protect against unauthorized access.

Affected Version(s)

ServiceNow Records 0

ServiceNow Records 0

ServiceNow Records 0

References

https://support.servicenow.com/kb?id=kb_article_view&sysp...
vendor-advisory
https://www.linkedin.com/in/osamay/
x_reporter

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Osama Yousef
.