ServiceNow CVE-2022-39048
Cross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment_redirect
Unverified. The per-release patch levels below are an auto-import (NVD + GitHub Advisory Database) and have not been confirmed against the login-gated ServiceNow KB, so the exposure check returns NEEDS REVIEW. Review the references and your current patch level.
Risk & exploitation
- nuclei · 2026-10-25 · https://github.com/projectdiscovery/nuclei-templates#CVE-2022-39048
- nuclei · undated · https://github.com/projectdiscovery/nuclei-templates/blob/4b33e3a963a2e2f1ac2c72afff5d794fcf19eb31/http/cves/2022/CVE-2022-39048.yaml
Detection seeds: none indexed — public detection content (Sigma) that references this id; a seed is a starting point for a rule, not a verified fingerprint.
EPSS (FIRST) estimates a low-to-moderate likelihood of exploitation in the next 30 days (2026-10-24). Priority blends CVSS, EPSS, KEV and public-exploit availability — operational prioritization, not a NIS2/DORA reporting determination.
Summary
A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an attacker would need to persuade an authenticated user to click a maliciously crafted URL. Successful exploitation potentially could be used to conduct various client-side attacks, including, but not limited to, phishing, redirection, theft of CSRF tokens, and use of an authenticated user's browser or session to attack other systems.
Auto-generated stub from NVD. Detection signals and per-release fixed-in are pending manual authoring/verification; until a signal carries a verified match, the exposure check returns DORMANT/INVESTIGATE — never a false EXERCISED.Affected releases & fixed-in
| Release | Fixed in |
|---|---|
| Quebec | TODO: verify — login-gated ServiceNow KB |
| Rome | TODO: verify — login-gated ServiceNow KB |
| San Diego | TODO: verify — login-gated ServiceNow KB |
| Tokyo | TODO: verify — login-gated ServiceNow KB |
| Utah | TODO: verify — login-gated ServiceNow KB |
Source & attribution
GHSA GHSA-48vw-436h-p87m + NVD https://nvd.nist.gov/vuln/detail/CVE-2022-39048 (auto-synced 2026-06-08); CVSS/CWE/KEV/references from the GitHub Advisory Database (CC-BY 4.0). GHSA carries no version data — per-release fixed-in is the NVD-CPE hint or TODO: verify on the login-gated support.servicenow.com KB.
References
Data: GitHub Advisory Database (CC-BY 4.0), NVD, the CISA KEV catalog, FIRST EPSS, Exploit-DB, and Nuclei templates.