{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-04T06:06:32.090","vulnerabilities":[{"cve":{"id":"CVE-2022-42704","sourceIdentifier":"cve@mitre.org","published":"2023-01-13T00:15:09.563","lastModified":"2026-06-17T05:05:09.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec, Rome, and San Diego allows remote attackers to inject arbitrary web script via the Standard Ticket Conversations widget."},{"lang":"es","value":"Una vulnerabilidad de cross-site scripting (XSS) en el Employee Service Center (esc) y Service Portal (sp) en ServiceNow Quebec, Roma y San Diego permite a atacantes remotos inyectar scripts web arbitrario a través del widget Standard Ticket Conversations."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-09T13:13:34.638992Z","id":"CVE-2022-42704","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:servicenow:servicenow:quebec:*:*:*:*:*:*:*","matchCriteriaId":"412004C5-93F0-4EC0-B928-E6F41AB95FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:servicenow:servicenow:rome:*:*:*:*:*:*:*","matchCriteriaId":"001789AB-E56B-4D04-B1B4-DD326A0CB1C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:servicenow:servicenow:rome:patch_1:*:*:*:*:*:*","matchCriteriaId":"52C8A7D2-F930-4078-9E9D-E48782E46CBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:servicenow:servicenow:rome:patch_2:*:*:*:*:*:*","matchCriteriaId":"EAA82A56-93C2-47DC-92BA-D2EBF0C19EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:servicenow:servicenow:rome:patch_3:*:*:*:*:*:*","matchCriteriaId":"B053530E-1CB3-4A86-BD4B-569750776A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:servicenow:servicenow:rome:patch_4:*:*:*:*:*:*","matchCriteriaId":"00EE16EE-B759-4BD8-A30B-C952142C860E"},{"vulnerable":true,"criteria":"cpe:2.3:a:servicenow:servicenow:san_diego:*:*:*:*:*:*:*","matchCriteriaId":"0332F3A4-ABA4-4EE1-955C-C4B4B2B3C881"}]}]}],"references":[{"url":"https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1216141","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1216141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}}]}