title: Cross-Site Scripting (XSS) vulnerability found on logout functionality
description: There exists a reflected XSS within the logout functionality of ServiceNow versions lower than Quebec Patch 10 Hotfix 11b, Rome Patch 10 Hotfix 3b, San Diego Patch 9, Tokyo Patch 4, and Utah GA. This enables an unauthenticated remote attacker to execute arbitrary JavaScript code in the browser-based web console.
problem types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
vendor: ServiceNow
product: Now Platform
versions:
version: Quebec, status: affected, lessThan: Patch 10 Hotfix 11b, versionType: custom
version: Rome, status: affected, lessThan: Patch 10 Hotfix 3b, versionType: custom
version: San Diego, status: affected, lessThan: Patch 9, versionType: custom
version: Tokyo, status: affected, lessThan: Patch 4, versionType: custom
version: Utah, status: affected, lessThan: GA, versionType: custom
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
]