Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-1209 EUVD-2023-23488GHSA-gvxg-qc2x-rm9f

Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.

Published May 23, 2023 · Updated Jan 17, 2025 · Assigned by SN

Vendor: ServiceNow Product: ServiceNow Records

Description

Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.

Affected products

VendorProductAffectedFixed
ServiceNow ServiceNow Records < Tokyo Patch 5, < Tokyo Patch 4a, < San Diego Patch 10, < San Diego Patch 9a, < Rome Patch 10 Hot Fix 4b, < Utah Patch 1 Tokyo Patch 5

References