Luke Symons

The issue is an Access Control List (ACL) bypass in ServiceNow Core functionality. If successfully exploited, it could allow an authenticated user to obtain sensitive information from tables missing authorization controls.

The issue is related to improper access control in FactoryCamera, allowing an attacker to access a file with system privilege.

The issue allows an attacker to access contact information due to an intent redirection vulnerability in Group Sharing.

The issue allows an attacker to access Samsung Health via a malicious content provider or lead to denial of service due to a non-existent provider.

The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the `S801F0334` parameter to the "hdd.htm" endpoint.