medium5.5
CVE-2022-46886
There exists an open redirect within the response list update functionality of ServiceNow.
Impact
There exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redirect users to arbitrary domains when clicking on a URL within a service-now domain.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Servicenow | Servicenow | Versions quebec, rome, san_diego, tokyo |