CVE-2018-8720

NONE EPSS 48.3%

Published Mar 15, 20188y ago · Modified Jun 17, 20262w ago

Published Mar 15, 2018 8y ago

Last Modified Jun 17, 2026 2w ago

Description

ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal (aka search_results.do).

Threat Intelligence

EPSS Exploit Probability

48.3% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

Vendor	Product	Version	Range
servicenow	it_service_management	*	any

References 1

packetstormsecurity.com https://packetstormsecurity.com/files/137427/ServiceNow-ITSM-Cross-Site-Scripting.html

Third Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.