Medium severity · published Apr 17, 2023
CVE-2022-46389
There exists a reflected XSS within the logout functionality of ServiceNow versions lower than Quebec Patch 10 Hotfix 11b, Rome Patch 10 Hotfix 3b, San Diego Patch 9, Tokyo Patch…
6.1
CVSS
0.6%
EPSS
No
On KEV
Description
There exists a reflected XSS within the logout functionality of ServiceNow versions lower than Quebec Patch 10 Hotfix 11b, Rome Patch 10 Hotfix 3b, San Diego Patch 9, Tokyo Patch 4, and Utah GA. This enables an unauthenticated remote attacker to execute arbitrary JavaScript code in the browser-based web console.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Servicenow · Servicenow
quebec; rome; rome; rome; rome; rome; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-46389
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-46389
Vendor Advisory
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1272156
More from Servicenow
9.8
CVE-2024-5217
Incomplete Input Validation in GlideExpression Script
9.8
CVE-2024-4879
Jelly Template Injection Vulnerability in ServiceNow UI Macros
10.0
CVE-2024-8923
ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform
8.8
CVE-2018-7748
report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media…
7.5
CVE-2024-8924
ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform