Event Management vCenter connector breaks login when usernames or passwords contain predefined XML entities ", &, ', <, or >.

Steps to Reproduce

Test the vCenter connector


- Go to MID Server -> Script Includes -> vCenter_JS

- Scroll down to authToken: function () {

- Replace the lines that start with:

var username

var password

With the following code:

var StringUtil =;
var username = StringUtil.escapeHTML(this.probe.getParameter("username") || "");
var password = StringUtil.escapeHTML(this.probe.getParameter("password") || "");

Save the script include

Related Problem: PRB1400358

Seen In

SR - IRM - Audit Management - New York 2019 Q3
SR - IRM - GRC Profiles - Madrid 2019 Q2
SR - IRM - Policy and Compliance - Madrid 2019 Q2
SR - IRM - Risk Management - New York 2019 Q3

Intended Fix Version


Safe Harbor Statement

This "Intended Fix Version" information is meant to outline ServiceNow's general product direction and should not be relied upon in making a purchasing decision. The information provided here is for information purposes only and may not be incorporated into any contract. It is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. The development, release, and timing of any features or functionality described for our products remains at ServiceNow's sole discretion.

Associated Community Threads

There is no data to report.

Article Information

Last Updated:2020-05-26 12:39:44