漏洞描述
在ServiceNow的注销功能中存在一个反射的XSS。这使得未经身份验证的远程攻击者可以执行任意JavaScript。
ServiceNow logout_redirect.do 存在跨站脚本攻击漏洞(CVE-2022-38463)
PoC代码
暂无相关漏洞推荐
-
CVE-2022-38463: ServiceNow - Cross-Site Scripting POC
2025-08-01 | ServiceNowServiceNow through San Diego Patch 4b and Patch 6 contains a cross-site scripting vulnerability in t... -
CVE-2022-39048: ServiceNow - Cross-site Scripting POC
2025-08-01 | ServiceNowA XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vu... -
CVE-2024-4879: ServiceNow UI Macros - Template Injection POC
2025-08-01 | ServiceNowServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Wash... -
Webmin /package-updates/update.cgi 命令执行漏洞（CVE-2022-36446） 无POC
2025-09-05 | WebminWebmin是Webmin社区的一套基于Web的用于类Unix操作系统中的系统管理工具。 Webmin 1.997之前的版本存在安全漏洞，该漏洞源于其software/apt-lib.pl组件缺少对U... -
CVE-2022-0342: Zyxel authentication bypass patch analysis POC
2025-09-01 | ZyxelAn authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versio...