CVE-2019-20768
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do.
ServiceNow IT Service Management Kingston hasta el parche 14-1, London hasta el parche 7 y Madrid antes del parche 4, permiten un ataque de tipo XSS almacenado por medio de los parámetros sysparm_item_guid y sys_id diseñados en una Petición de Incidente a service_catalog.do.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-04-15 CVE Reserved
- 2020-05-05 CVE Published
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://outpost24.com/blog?tags=307 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://outpost24.com/blog/Responsible-disclosure-Multiple-stored-XSS-vulnerabilities-discovered-in-ServiceNow-ITSM | 2024-08-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | - |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_10 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_10-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_10-2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_11 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_12 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_12-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_12-2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_13 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_14 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_14-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_3 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_3-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_3-2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_3a-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_4 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_4-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_4-2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_4-4 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_5 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_6 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_6-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_6-2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_6-3 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_6-5 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_7 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_7-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_8 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_8-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | kingston Search vendor "Servicenow" for product "It Service Management" and version "kingston" | patch_9 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | - |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_1-2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_1-3 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_2-2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_2-4 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_2-5 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_3 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_3-3 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_3-4 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_4 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_4-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_4-2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_4-3 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_4-4 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_4-5 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_4-6 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_5 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_5-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_6 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_6-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_6a-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_6b-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | london Search vendor "Servicenow" for product "It Service Management" and version "london" | patch_7 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | madrid Search vendor "Servicenow" for product "It Service Management" and version "madrid" | - |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | madrid Search vendor "Servicenow" for product "It Service Management" and version "madrid" | patch_0-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | madrid Search vendor "Servicenow" for product "It Service Management" and version "madrid" | patch_1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | madrid Search vendor "Servicenow" for product "It Service Management" and version "madrid" | patch_1-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | madrid Search vendor "Servicenow" for product "It Service Management" and version "madrid" | patch_1-2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | madrid Search vendor "Servicenow" for product "It Service Management" and version "madrid" | patch_2 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | madrid Search vendor "Servicenow" for product "It Service Management" and version "madrid" | patch_3 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | madrid Search vendor "Servicenow" for product "It Service Management" and version "madrid" | patch_3-1 |
Affected
| ||||||
| Servicenow Search vendor "Servicenow" | It Service Management Search vendor "Servicenow" for product "It Service Management" | madrid Search vendor "Servicenow" for product "It Service Management" and version "madrid" | patch_3-2 |
Affected
| ||||||