« Volver al listado

CVE-2022-38172

Estado: ModificadaMedia (6.1)—

ServiceNow versiones hasta San Diego Patch 3 permite XSS por medio del campo name durante la creación de un nuevo panel de control para el panel de análisis de rendimiento.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Servicenow — Servicenow

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-38172",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-08-23T19:15:09.800",
  "references": [
    {
      "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1122640",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1122640",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard."
    },
    {
      "lang": "es",
      "value": "ServiceNow versiones hasta San Diego Patch 3 permite XSS por medio del campo name durante la creación de un nuevo panel de control para el panel de análisis de rendimiento."
    }
  ],
  "lastModified": "2026-06-17T04:56:14.037",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71A44062-D94F-4246-A218-33AD4C43C7FF"
            },
            {
              "criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A4ABAF4-C84B-4E7B-A156-24640B7D56EE"
            },
            {
              "criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1a:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2855AE65-1B96-4537-BB6E-7659114955EA"
            },
            {
              "criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_1_hotfix_1b:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63725CBE-34A5-4B9E-BA8E-32E66B89C646"
            },
            {
              "criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B2DC45C-17A0-4D92-AB29-3497DA43707E"
            },
            {
              "criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_2_hotfix_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2822278-2089-4F78-86EE-D63A9516B5A5"
            },
            {
              "criteria": "cpe:2.3:a:servicenow:servicenow:san_diego:patch_3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49444E5E-0AB7-4083-8663-089955134AA7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}