CVE-2019-20768

MEDIUM · CVSS 5.4 EPSS 0.72%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-05-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-20768

Severity

MEDIUM

CVSS

5.4

EPSS

0.72%

Original NVD Description

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do.