CVE-2018-8720: ServiceNow It Service Management

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal (aka search_results.do).

Affected products

• ServiceNow It Service Management: affected versions not specified

Published 2018-03-15. Last modified 2026-06-17.