Read the docs
TI-2022-21442 Aliases CVE-2022-43684GHSA-438x-9g8x-78p5

ACL bypass in Reporting functionality

Priority MEDIUM 46CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: * Quebec prior to Patch 10 Hot Fix 8b * Rome prior to Patch 10 Hot Fix 1 * San Diego prior to Patch 7 * Tokyo prior to Tokyo Patch 1; and * Utah prior to Utah General Availability If this ACL bypass issue were to be successfully exploited, it potentially could allow an authenticated user to obtain sensitive information from tables missing authorization controls.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.018 78th percentileScored 2026-11-07
Fix Fixed Now Platform (ServiceNow): Patch 10 Hot Fix 8b, Patch 10 Hot Fix 1, Patch 7 +2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ServiceNowNow PlatformQuebec to before Patch 10 Hot Fix 8b; Rome to before Patch 10 Hot Fix 1; San Diego to before Patch 7; Tokyo to before Tokyo Patch 1; Utah to before Utah General Availability (GA)Patch 10 Hot Fix 8b, Patch 10 Hot Fix 1, Patch 7, Tokyo Patch 1, Utah General Availability (GA)Patch availableCNA
  • Now Platform VendorServiceNow Affected Quebec to before Patch 10 Hot Fix 8b; Rome to before Patch 10 Hot Fix 1; San Diego to before Patch 7; Tokyo to before Tokyo Patch 1; Utah to before Utah General Availability (GA) Fixed in Patch 10 Hot Fix 8b, Patch 10 Hot Fix 1, Patch 7, Tokyo Patch 1, Utah General Availability (GA) Patch available CNA

CPE configurations NVD · 73

CPEVersionsRoleVendor
cpe:2.3:a:servicenow:servicenow:quebec:patch_1_hotfix_1:*:*:*:*:*:*quebec patch_1_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_10:*:*:*:*:*:*quebec patch_10VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_3:*:*:*:*:*:*quebec patch_10_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_3a:*:*:*:*:*:*quebec patch_10_hotfix_3aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_3b:*:*:*:*:*:*quebec patch_10_hotfix_3bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_4:*:*:*:*:*:*quebec patch_10_hotfix_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_2:*:*:*:*:*:*quebec patch_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_2_hotfix_1:*:*:*:*:*:*quebec patch_2_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_2_hotfix_2:*:*:*:*:*:*quebec patch_2_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_3:*:*:*:*:*:*quebec patch_3VulnerableServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_1_hotfix_1:*:*:*:*:*:* Versions quebec patch_1_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_10:*:*:*:*:*:* Versions quebec patch_10 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_3:*:*:*:*:*:* Versions quebec patch_10_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_3a:*:*:*:*:*:* Versions quebec patch_10_hotfix_3a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_3b:*:*:*:*:*:* Versions quebec patch_10_hotfix_3b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_10_hotfix_4:*:*:*:*:*:* Versions quebec patch_10_hotfix_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_2:*:*:*:*:*:* Versions quebec patch_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_2_hotfix_1:*:*:*:*:*:* Versions quebec patch_2_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_2_hotfix_2:*:*:*:*:*:* Versions quebec patch_2_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_3:*:*:*:*:*:* Versions quebec patch_3 Vulnerable ·ServiceNow
Show 63 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:servicenow:servicenow:quebec:patch_4:*:*:*:*:*:*quebec patch_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_4_hotfix_2:*:*:*:*:*:*quebec patch_4_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_5:*:*:*:*:*:*quebec patch_5VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_6:*:*:*:*:*:*quebec patch_6VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_7:*:*:*:*:*:*quebec patch_7VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_8:*:*:*:*:*:*quebec patch_8VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:quebec:patch_9:*:*:*:*:*:*quebec patch_9VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_1:*:*:*:*:*:*rome patch_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_1:*:*:*:*:*:*rome patch_1_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_1a:*:*:*:*:*:*rome patch_1_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_1b:*:*:*:*:*:*rome patch_1_hotfix_1bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_2:*:*:*:*:*:*rome patch_1_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_3:*:*:*:*:*:*rome patch_1_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_10:*:*:*:*:*:*rome patch_10VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_2:*:*:*:*:*:*rome patch_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_2_hotfix_1:*:*:*:*:*:*rome patch_2_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_2_hotfix_2:*:*:*:*:*:*rome patch_2_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_3:*:*:*:*:*:*rome patch_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_3_hotfix_1:*:*:*:*:*:*rome patch_3_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_4:*:*:*:*:*:*rome patch_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_4_hotfix_1:*:*:*:*:*:*rome patch_4_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_4_hotfix_1a:*:*:*:*:*:*rome patch_4_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_4_hotfix_1b:*:*:*:*:*:*rome patch_4_hotfix_1bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_5:*:*:*:*:*:*rome patch_5VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_5_hotfix_1:*:*:*:*:*:*rome patch_5_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_5_hotfix_2:*:*:*:*:*:*rome patch_5_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_6:*:*:*:*:*:*rome patch_6VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_6_hotfix_1:*:*:*:*:*:*rome patch_6_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_6_hotfix_2:*:*:*:*:*:*rome patch_6_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_7:*:*:*:*:*:*rome patch_7VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_7_hotfix_1:*:*:*:*:*:*rome patch_7_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_7a:*:*:*:*:*:*rome patch_7aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_7b:*:*:*:*:*:*rome patch_7bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_8:*:*:*:*:*:*rome patch_8VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_8_hotfix_1:*:*:*:*:*:*rome patch_8_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_8_hotfix_2:*:*:*:*:*:*rome patch_8_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_9:*:*:*:*:*:*rome patch_9VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_9_hotfix_1:*:*:*:*:*:*rome patch_9_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_9a:*:*:*:*:*:*rome patch_9aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:rome:patch_9b:*:*:*:*:*:*rome patch_9bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_1:*:*:*:*:*:*san_diego patch_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1:*:*:*:*:*:*san_diego patch_1_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1a:*:*:*:*:*:*san_diego patch_1_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1b:*:*:*:*:*:*san_diego patch_1_hotfix_1bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_1:*:*:*:*:*:*san_diego patch_10_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_1a:*:*:*:*:*:*san_diego patch_10_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_1b:*:*:*:*:*:*san_diego patch_10_hotfix_1bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_2:*:*:*:*:*:*san_diego patch_10_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_2b:*:*:*:*:*:*san_diego patch_10_hotfix_2bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_2:*:*:*:*:*:*san_diego patch_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_2_hotfix_1:*:*:*:*:*:*san_diego patch_2_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_3:*:*:*:*:*:*san_diego patch_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_1:*:*:*:*:*:*san_diego patch_3_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_2:*:*:*:*:*:*san_diego patch_3_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_3:*:*:*:*:*:*san_diego patch_3_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_4:*:*:*:*:*:*san_diego patch_3_hotfix_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_4:*:*:*:*:*:*san_diego patch_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_4a:*:*:*:*:*:*san_diego patch_4aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_4b:*:*:*:*:*:*san_diego patch_4bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_5:*:*:*:*:*:*san_diego patch_5VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:san_diego:patch_6:*:*:*:*:*:*san_diego patch_6VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:tokyo:-:*:*:*:*:*:*tokyoVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:utah:-:*:*:*:*:*:*utahVulnerableServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_4:*:*:*:*:*:* Versions quebec patch_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_4_hotfix_2:*:*:*:*:*:* Versions quebec patch_4_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_5:*:*:*:*:*:* Versions quebec patch_5 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_6:*:*:*:*:*:* Versions quebec patch_6 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_7:*:*:*:*:*:* Versions quebec patch_7 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_8:*:*:*:*:*:* Versions quebec patch_8 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:quebec:patch_9:*:*:*:*:*:* Versions quebec patch_9 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_1:*:*:*:*:*:* Versions rome patch_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_1:*:*:*:*:*:* Versions rome patch_1_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_1a:*:*:*:*:*:* Versions rome patch_1_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_1b:*:*:*:*:*:* Versions rome patch_1_hotfix_1b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_2:*:*:*:*:*:* Versions rome patch_1_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_1_hotfix_3:*:*:*:*:*:* Versions rome patch_1_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_10:*:*:*:*:*:* Versions rome patch_10 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_2:*:*:*:*:*:* Versions rome patch_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_2_hotfix_1:*:*:*:*:*:* Versions rome patch_2_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_2_hotfix_2:*:*:*:*:*:* Versions rome patch_2_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_3:*:*:*:*:*:* Versions rome patch_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_3_hotfix_1:*:*:*:*:*:* Versions rome patch_3_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_4:*:*:*:*:*:* Versions rome patch_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_4_hotfix_1:*:*:*:*:*:* Versions rome patch_4_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_4_hotfix_1a:*:*:*:*:*:* Versions rome patch_4_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_4_hotfix_1b:*:*:*:*:*:* Versions rome patch_4_hotfix_1b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_5:*:*:*:*:*:* Versions rome patch_5 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_5_hotfix_1:*:*:*:*:*:* Versions rome patch_5_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_5_hotfix_2:*:*:*:*:*:* Versions rome patch_5_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_6:*:*:*:*:*:* Versions rome patch_6 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_6_hotfix_1:*:*:*:*:*:* Versions rome patch_6_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_6_hotfix_2:*:*:*:*:*:* Versions rome patch_6_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_7:*:*:*:*:*:* Versions rome patch_7 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_7_hotfix_1:*:*:*:*:*:* Versions rome patch_7_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_7a:*:*:*:*:*:* Versions rome patch_7a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_7b:*:*:*:*:*:* Versions rome patch_7b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_8:*:*:*:*:*:* Versions rome patch_8 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_8_hotfix_1:*:*:*:*:*:* Versions rome patch_8_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_8_hotfix_2:*:*:*:*:*:* Versions rome patch_8_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_9:*:*:*:*:*:* Versions rome patch_9 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_9_hotfix_1:*:*:*:*:*:* Versions rome patch_9_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_9a:*:*:*:*:*:* Versions rome patch_9a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:rome:patch_9b:*:*:*:*:*:* Versions rome patch_9b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_1:*:*:*:*:*:* Versions san_diego patch_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1:*:*:*:*:*:* Versions san_diego patch_1_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1a:*:*:*:*:*:* Versions san_diego patch_1_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1b:*:*:*:*:*:* Versions san_diego patch_1_hotfix_1b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_1:*:*:*:*:*:* Versions san_diego patch_10_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_1a:*:*:*:*:*:* Versions san_diego patch_10_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_1b:*:*:*:*:*:* Versions san_diego patch_10_hotfix_1b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_2:*:*:*:*:*:* Versions san_diego patch_10_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_10_hotfix_2b:*:*:*:*:*:* Versions san_diego patch_10_hotfix_2b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_2:*:*:*:*:*:* Versions san_diego patch_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_2_hotfix_1:*:*:*:*:*:* Versions san_diego patch_2_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_3:*:*:*:*:*:* Versions san_diego patch_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_1:*:*:*:*:*:* Versions san_diego patch_3_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_2:*:*:*:*:*:* Versions san_diego patch_3_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_3:*:*:*:*:*:* Versions san_diego patch_3_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_3_hotfix_4:*:*:*:*:*:* Versions san_diego patch_3_hotfix_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_4:*:*:*:*:*:* Versions san_diego patch_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_4a:*:*:*:*:*:* Versions san_diego patch_4a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_4b:*:*:*:*:*:* Versions san_diego patch_4b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_5:*:*:*:*:*:* Versions san_diego patch_5 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:san_diego:patch_6:*:*:*:*:*:* Versions san_diego patch_6 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:tokyo:-:*:*:*:*:*:* Versions tokyo Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:utah:-:*:*:*:*:*:* Versions utah Vulnerable ·ServiceNow

Remediation

  • Fix · CNA Now Platform (ServiceNow) Fixed in Patch 10 Hot Fix 8b, Patch 10 Hot Fix 1, Patch 7, Tokyo Patch 1, Utah General Availability (GA)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-43684
  2. 2026-10-03 Alias added: GHSA-438x-9g8x-78p5

References

Advisory 1

Other 4

  • TI-2024-04841 Incomplete Input Validation in GlideExpression Script KEVCVSS 4.0CRITICAL 9.2
  • TI-2024-04536 Jelly Template Injection Vulnerability in ServiceNow UI Macros KEVCVSS 4.0CRITICAL 9.3
  • TI-2024-08286 Sandbox Escape in Now Platform CVSS 4.0CRITICAL 9.3
  • TI-2024-08287 Unauthenticated Blind SQL Injection in Core Platform CVSS 4.0HIGH 8.7
  • TI-2018-05591 report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote… CVSS 3.0HIGH 8.8
  • TI-2021-20911 The password-reset form in ServiceNow Orlando provides different responses to invalid… CVSS 3.1MEDIUM 5.3
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences