GCVE-VVD-CERTFI-2023-0014

Advisory Published

Vulnetix · Advisory published November 9, 2023

About a week ago, ServiceNow announced on its support site that misconfigurations of the platform could allow sensitive data to be leaked. The data security flaw in question is a critical concern for organisations using the service, as it can lead to a significant data leak of sensitive company data. The National Cyber Security Centre Finland is aware of cases where this data security flaw has been exploited.

Download JSON Open in Console

Aliases

CVE-2023-20198 CVE-2023-20273

Transitive aliases

H1-2778350 GHSA-xm3x-5hpf-5369 BDU:2023-06875 ICSA-23-297-01 cisco-sa-iosxe-webui-privesc-j22SaA4z WID-SEC-W-2023-2658 GSD-2023-20273 CERTFR-2023-ALE-011 CNVD-2023-85953 CISCO-SA-IOSXE-WEBUI-PRIVESC-J22SAA4Z GHSA-4xrf-pcxr-rf3c EUVD-2023-24377 GSD-2023-20198 BDU:2023-07028 CNVD-2023-77098

References

advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON