ServiceNow through San Diego Patch 4b and Patch 6 allows reflected XSS in the logout functionality.Referenceshttps://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1156793
