CVE:CVE-2022-38463
CNNVD:CNNVD-202208-3781
ServiceNow San Diego Patch是美国ServiceNow公司的一系列补丁程序。
ServiceNow San Diego Patch 4b 和 Patch 6及之前版本存在跨站脚本漏洞，该漏洞源于允许在注销功能中进行XSS。
solution:Upgrade servicenow servicenow to a higher version than san_diego:patch_4,san_diego:patch_4a,san_diego:patch_6,and avoid the version san_diego:patch_4,san_diego:patch_4a,san_diego:patch_6