CVE:CVE-2022-42704
CNNVD:CNNVD-202301-1016
ServiceNow San Diego Patch和ServiceNow Rome Patch都是美国ServiceNow公司的产品。ServiceNow San Diego Patch是一系列补丁程序。ServiceNow Rome Patch是一个应用程序补丁。
ServiceNow San Diego Patch和Rome Patch存在安全漏洞，该漏洞源于存在跨站脚本(XSS)，允许远程攻击者注入任意Web脚本。
solution:Upgrade servicenow servicenow to a higher version than quebec,rome,rome:patch_1,rome:patch_2,rome:patch_3,rome:patch_4,san_diego,and avoid the version quebec,rome,rome:patch_1,rome:patch_2,rome:patch_3,rome:patch_4,san_diego