ServiceNow Blog

 ServiceNow SimpleList Widget Vulnerability Link:  https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1553688 recent vulnerability affecting the ServiceNow service portal widget called SimpleList from an ethical hacker who posted on a blog. This vulnerability effects public Service Portal pages using the SimpleList widget where the SimpleList points to tables that have empty ACLs. If you have the High Security plug-in or have IP filtering, the vulnerability doesn’t apply. For more information, see the attached communication , have received from ServiceNow and ensure you review  this KB .  we noticed that: ServiceNow’s operational team has made updates to the platform a mitigate the issue. You can view the relevant changes by updating this link with your own ServiceNow instance name: [Instance Name]. service-now.com/sys_security_acl_list.do?sysparm_query=sys_scope%3Dc026625edb28a200c089f100cf96199a%5Esys_updated_by%3Dsystem%40snc.maint%2Cadmin...