Records behind this conclusion
Client-callable Script Include reads a sensitive table with no in-script authorization
Driven by 4 configurations your organization or a partner modified from the platform baseline — 48 untouched-baseline / ServiceNow-packaged matches excluded from the grade.
| Severity | Finding | Target | Evidence | Analysis |
|---|---|---|---|---|
| high | Client-callable Script Include reads a sensitive table with no in-script authorization SEC-CC-SI-SENSITIVE-EXPOSED · SECURITYreview recommended | sys_script_includeEmployerInsurerAjax | name=EmployerInsurerAjax · access=public · api_name=global.EmployerInsurerAjax | not analyzed |
| high | Client-callable Script Include reads a sensitive table with no in-script authorization SEC-CC-SI-SENSITIVE-EXPOSED · SECURITYreview recommended | sys_script_includeWS5GetUserDetails | name=WS5GetUserDetails · access=public · api_name=global.WS5GetUserDetails | not analyzed |
| high | Client-callable Script Include reads a sensitive table with no in-script authorization SEC-CC-SI-SENSITIVE-EXPOSED · SECURITYreview recommended | sys_script_includeEmployerInsurerAjax | name=EmployerInsurerAjax · access=public · api_name=global.EmployerInsurerAjax | not analyzed |
| high | Client-callable Script Include reads a sensitive table with no in-script authorization SEC-CC-SI-SENSITIVE-EXPOSED · SECURITYreview recommended | sys_script_includeWS5GetUserDetails | name=WS5GetUserDetails · access=public · api_name=global.WS5GetUserDetails | not analyzed |