There exists an open redirect within the response list update functionality of ServiceNow. This allows malicious users to redirect users to arbitrary domains when clicking on a URL within a service-now domain.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
servicenow servicenow san diego |
||
servicenow servicenow rome |
||
servicenow servicenow quebec |
||
servicenow servicenow tokyo |
Vulmon