CVE-2022-46886

Published: Apr 14, 2023Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

There exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redirect users to arbitrary domains when clicking on a URL within a service-now domain.

Affected (56)

Products: Servicenow: Servicenow

Servicenow

1 product

Servicenow

Configuration A

56 vulnerable

Vulnerable Software	Affected Versions
Servicenow Servicenow	Version quebec
Servicenow Servicenow	Version quebec patch_10
Servicenow Servicenow	Version rome patch_10
Servicenow Servicenow	Version rome patch_10_hotfix_1
Servicenow Servicenow	Version rome patch_10_hotfix_2
Servicenow Servicenow	Version rome patch_10_hotfix_2a
Servicenow Servicenow	Version rome patch_1
Servicenow Servicenow	Version rome patch_1_hotfix_1
Servicenow Servicenow	Version rome patch_1_hotfix_1b
Servicenow Servicenow	Version rome patch_1_hotfix_2
Servicenow Servicenow	Version rome patch_1_hotfix_3
Servicenow Servicenow	Version rome patch_2
Servicenow Servicenow	Version rome patch_2_hotfix_1
Servicenow Servicenow	Version rome patch_2_hotfix_2
Servicenow Servicenow	Version rome patch_3
Servicenow Servicenow	Version rome patch_3_hotfix_1
Servicenow Servicenow	Version rome patch_4
Servicenow Servicenow	Version rome patch_4_hotfix_1
Servicenow Servicenow	Version rome patch_4_hotfix_1a
Servicenow Servicenow	Version rome patch_4_hotfix_1b
Servicenow Servicenow	Version rome patch_5
Servicenow Servicenow	Version rome patch_5_hotfix_1
Servicenow Servicenow	Version rome patch_5_hotfix_2
Servicenow Servicenow	Version rome patch_6
Servicenow Servicenow	Version rome patch_6_hotfix_1
Servicenow Servicenow	Version rome patch_6_hotfix_2
Servicenow Servicenow	Version rome patch_7
Servicenow Servicenow	Version rome patch_7_hotfix_1
Servicenow Servicenow	Version rome patch_7a
Servicenow Servicenow	Version rome patch_7b
Servicenow Servicenow	Version rome patch_8
Servicenow Servicenow	Version rome patch_8_hotfix_1
Servicenow Servicenow	Version rome patch_8_hotfix_2
Servicenow Servicenow	Version rome patch_9
Servicenow Servicenow	Version rome patch_9_hotfix_1
Servicenow Servicenow	Version rome patch_9a
Servicenow Servicenow	Version rome patch_9b
Servicenow Servicenow	Version san_diego patch_1
Servicenow Servicenow	Version san_diego patch_1_hotfix_1
Servicenow Servicenow	Version san_diego patch_1_hotfix_1a
Servicenow Servicenow	Version san_diego patch_1_hotfix_1b
Servicenow Servicenow	Version san_diego patch_2
Servicenow Servicenow	Version san_diego patch_2_hotfix_1
Servicenow Servicenow	Version san_diego patch_3
Servicenow Servicenow	Version san_diego patch_3_hotfix_1
Servicenow Servicenow	Version san_diego patch_3_hotfix_2
Servicenow Servicenow	Version san_diego patch_3_hotfix_3
Servicenow Servicenow	Version san_diego patch_3_hotfix_4
Servicenow Servicenow	Version san_diego patch_4
Servicenow Servicenow	Version san_diego patch_4a
Servicenow Servicenow	Version san_diego patch_4b
Servicenow Servicenow	Version san_diego patch_6
Servicenow Servicenow	Version san_diego patch_7
Servicenow Servicenow	Version san_diego patch_8
Servicenow Servicenow	Version tokyo
Servicenow Servicenow	Version tokyo patch1

Related CWEs

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (2)

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1219857

Source: psirt@servicenow.com

Vendor Advisory

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1219857

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.