Skip to main content

Threats Tagged 'cve-2025-11450'

View all threats tagged with 'cve-2025-11450'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2025-11450

Threats Tagged 'cve-2025-11450'

Click on any threat for detailed analysis and mitigation recommendations

CVE-2025-11450 is a reflected cross-site scripting (XSS) vulnerability in the ServiceNow AI Platform that allows attackers to execute arbitrary code in the browsers of users who click on maliciously crafted links. This vulnerability does not require authentication or privileges and can be exploited remotely with low complexity. ServiceNow has released security updates for hosted and self-hosted instances to address this issue. The vulnerability has a CVSS score of 5.3, indicating a medium severity level. Although no known exploits are currently reported in the wild, organizations using the ServiceNow AI Platform should promptly apply patches to mitigate risk. The vulnerability impacts confidentiality and integrity by enabling potential session hijacking or unauthorized actions via the victim’s browser. European organizations relying on ServiceNow, especially in countries with high adoption of IT service management platforms, are at risk. Mitigation involves timely patching, user awareness to avoid clicking suspicious links, and monitoring for unusual activity. Countries with significant ServiceNow market presence and critical infrastructure sectors are most likely affected.

Join the discussion

Showing 1 to 1 of 1 result

Filters:Tag: cve-2025-11450
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses