CVE-2022-38172

MEDIUM CVSS: 6.1 Published: 2022-08-23 Modified: 2026-06-17

Description

ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard.

Affected Platforms

Servicenow Servicenow

Weakness Type

CWE-79

References