CVE-2019-20768

Published: May 5, 2020Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do.

Affected (66)

Products: Servicenow: It Service Management

Servicenow

1 product

It Service Management

Configuration A

66 vulnerable

Vulnerable Software	Affected Versions
Servicenow It Service Management	Version kingston
Servicenow It Service Management	Version kingston patch_10-1
Servicenow It Service Management	Version kingston patch_10-2
Servicenow It Service Management	Version kingston patch_10
Servicenow It Service Management	Version kingston patch_11
Servicenow It Service Management	Version kingston patch_12-1
Servicenow It Service Management	Version kingston patch_12-2
Servicenow It Service Management	Version kingston patch_12
Servicenow It Service Management	Version kingston patch_13
Servicenow It Service Management	Version kingston patch_14-1
Servicenow It Service Management	Version kingston patch_14
Servicenow It Service Management	Version kingston patch_1
Servicenow It Service Management	Version kingston patch_2
Servicenow It Service Management	Version kingston patch_3-1
Servicenow It Service Management	Version kingston patch_3-2
Servicenow It Service Management	Version kingston patch_3
Servicenow It Service Management	Version kingston patch_3a-1
Servicenow It Service Management	Version kingston patch_4-1
Servicenow It Service Management	Version kingston patch_4-2
Servicenow It Service Management	Version kingston patch_4-4
Servicenow It Service Management	Version kingston patch_4
Servicenow It Service Management	Version kingston patch_5
Servicenow It Service Management	Version kingston patch_6-1
Servicenow It Service Management	Version kingston patch_6-2
Servicenow It Service Management	Version kingston patch_6-3
Servicenow It Service Management	Version kingston patch_6-5
Servicenow It Service Management	Version kingston patch_6
Servicenow It Service Management	Version kingston patch_7-1
Servicenow It Service Management	Version kingston patch_7
Servicenow It Service Management	Version kingston patch_8-1
Servicenow It Service Management	Version kingston patch_8
Servicenow It Service Management	Version kingston patch_9
Servicenow It Service Management	Version london
Servicenow It Service Management	Version london patch_1-2
Servicenow It Service Management	Version london patch_1-3
Servicenow It Service Management	Version london patch_1
Servicenow It Service Management	Version london patch_2-2
Servicenow It Service Management	Version london patch_2-4
Servicenow It Service Management	Version london patch_2-5
Servicenow It Service Management	Version london patch_2
Servicenow It Service Management	Version london patch_3-3
Servicenow It Service Management	Version london patch_3-4
Servicenow It Service Management	Version london patch_3
Servicenow It Service Management	Version london patch_4-1
Servicenow It Service Management	Version london patch_4-2
Servicenow It Service Management	Version london patch_4-3
Servicenow It Service Management	Version london patch_4-4
Servicenow It Service Management	Version london patch_4-5
Servicenow It Service Management	Version london patch_4-6
Servicenow It Service Management	Version london patch_4
Servicenow It Service Management	Version london patch_5-1
Servicenow It Service Management	Version london patch_5
Servicenow It Service Management	Version london patch_6-1
Servicenow It Service Management	Version london patch_6
Servicenow It Service Management	Version london patch_6a-1
Servicenow It Service Management	Version london patch_6b-1
Servicenow It Service Management	Version london patch_7
Servicenow It Service Management	Version madrid
Servicenow It Service Management	Version madrid patch_0-1
Servicenow It Service Management	Version madrid patch_1-1
Servicenow It Service Management	Version madrid patch_1-2
Servicenow It Service Management	Version madrid patch_1
Servicenow It Service Management	Version madrid patch_2
Servicenow It Service Management	Version madrid patch_3-1
Servicenow It Service Management	Version madrid patch_3-2
Servicenow It Service Management	Version madrid patch_3