CVE:CVE-2022-46389
CNNVD:CNNVD-202304-1348
ServiceNow是美国ServiceNow公司的一个云计算平台。以帮助公司管理企业运营的数字工作流程。
ServiceNow存在安全漏洞，该漏洞源于logout功能存在反射型XSS漏洞。受影响的产品和版本：ServiceNow Quebec Patch 10 Hotfix 11b之前版本，Rome Patch 10 Hotfix 3b之前版本，San Diego Patch 9, Tokyo Patch 4及之前版本，Utah GA及之前版本。
solution:Upgrade servicenow servicenow to a higher version than quebec,rome,rome:early_availability,rome:patch_1,rome:patch_1_hotfix_1a,rome:patch_1_hotfix_1b,rome:patch_10,rome:patch_2,rome:patch_3,rome:patch_4,rome:patch_4_hotfix_1,rome:patch_4_hotfix_1a,rome:patch_4_hotfix_1b,rome:patch_5,rome:patch_6,rome:patch_7,rome:patch_7a,rome:patch_7b,rome:patch_8,rome:patch_9,rome:patch_9a,san_diego,san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_3,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_4b,san_diego:patch_5,san_diego:patch_6,san_diego:patch_7,san_diego:patch_7b,san_diego:patch_8,tokyo,tokyo:early_availability,tokyo:patch_1,tokyo:patch_1a,tokyo:patch_1b,tokyo:patch_2,tokyo:patch_3,utah,utah:early_availability,utah:patch_1,utah:patch_2,and avoid the version quebec,rome,rome:early_availability,rome:patch_1,rome:patch_1_hotfix_1a,rome:patch_1_hotfix_1b,rome:patch_10,rome:patch_2,rome:patch_3,rome:patch_4,rome:patch_4_hotfix_1,rome:patch_4_hotfix_1a,rome:patch_4_hotfix_1b,rome:patch_5,rome:patch_6,rome:patch_7,rome:patch_7a,rome:patch_7b,rome:patch_8,rome:patch_9,rome:patch_9a,san_diego,san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_3,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_4b,san_diego:patch_5,san_diego:patch_6,san_diego:patch_7,san_diego:patch_7b,san_diego:patch_8,tokyo,tokyo:early_availability,tokyo:patch_1,tokyo:patch_1a,tokyo:patch_1b,tokyo:patch_2,tokyo:patch_3,utah,utah:early_availability,utah:patch_1,utah:patch_2