← Back

It Service Management

it_service_management

Vendor: Servicenow • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-20768
1Servicenow
1It Service Management
Jun 17, 2026
May 5, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catal...Show more
ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do.Show less
CVE-2018-8720
1Servicenow
1It Service Management
Jun 17, 2026
Mar 15, 2018
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal (aka search_results.do).