← All advisories

Medium severity6.1NVD Advisory· Published Aug 23, 2022· Updated Jun 17, 2026

CVE-2022-38172

CVE-2022-38172

Description

ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard.

Affected products

9

Servicenow/Performance Analyticsllm-create
Range: <=San Diego Patch 3
Servicenow/Servicenow8 versions
cpe:2.3:a:servicenow:servicenow:san_diego:patch_1:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:servicenow:servicenow:san_diego:patch_1:*:*:*:*:*:*
- cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1:*:*:*:*:*:*
- cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1a:*:*:*:*:*:*
- cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1b:*:*:*:*:*:*
- cpe:2.3:a:servicenow:servicenow:san_diego:patch_2:*:*:*:*:*:*
- cpe:2.3:a:servicenow:servicenow:san_diego:patch_2_hotfix_1:*:*:*:*:*:*
- cpe:2.3:a:servicenow:servicenow:san_diego:patch_3:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

1

support.servicenow.com/kbnvdVendor Advisory

News mentions

0

No linked articles in our index yet.