Skip to content
OpenAdvisories
Medium WID-SEC-2025-2252 2 CVEs

ServiceNow Now Platform (AI Platform): Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Oct 9, 2025 · Updated Oct 9, 2025 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ServiceNow Now Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Die ServiceNow Now Platform ist eine Cloud-basierte Plattform, die Unternehmen bei der Automatisierung und Verwaltung ihrer Geschäftsprozesse unterstützt

Vulnerabilities 2

  • Medium 5.3
    CVE-2025-11449 Public exploit

    Reflected Cross Site Scripting in ServiceNow AI Platform

    ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a specially crafte…

  • Medium 5.3

    Reflected Cross Site Scripting in ServiceNow AI Platform

    ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a specially crafte…

Revision history

  1. #1

    Initiale Fassung

References