PT-2023-16870 · Servicenow · Servicenow

Osama Yousef · Published 2023-07-06 · Updated 2024-12-17 · CVE-2023-1298

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ServiceNow (affected versions not specified)

Description A Reflected Cross-Site scripting (XSS) vulnerability was identified in the ServiceNow Polaris Layout. This issue would enable an authenticated user to inject arbitrary scripts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-1298

Affected Products

Servicenow

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-1298 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1298 · Vendor Advisory
• https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1310230 · Vendor Advisory
• https://linkedin.com/in/osamay · Note
• https://t.me/cibsecurity/66156 · Telegram Post
• https://t.me/cvenotify/104517 · Telegram Post