← Database

CVE-2022-46886

MEDIUM CVSS: 5.5 Published: 2023-04-14 Modified: 2026-06-17

Description

There exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redirect users to arbitrary domains when clicking on a URL within a service-now domain.

Affected Platforms

Servicenow Servicenow

Weakness Type

CWE-601, CWE-601

References