Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: ServiceNow AI Platform Australia General Availability (GA), Washington DC Patch 10 Hot Fix 7b and 8 more versions Clear all filters
TI-2025-10489 CVE-2025-11449 · GHSA-pfwj-c5wr-r8pg

Reflected Cross Site Scripting in ServiceNow AI Platform

Priority LOW 30

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00355 Published 2025-10-10 Fixed in Washington DC Patch 10 Hot Fix 7b, Xanadu Patch 10 Hot Fix 1a +8 CWE-79
TI-2025-10490 CVE-2025-11450 · GHSA-2mg5-34rx-c3p8

Reflected Cross Site Scripting in ServiceNow AI Platform

Priority LOW 24

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00355 Published 2025-10-10 Fixed in Washington DC Patch 10 Hot Fix 7b, Xanadu Patch 10 Hot Fix 1a +8 CWE-79