| Package | Affected versions | Patched versions |
|---|---|---|
| servicenow | = jakarta |
report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free