https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217 CVE-2024-4879: ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. CVE-2024-5217: ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely. Added to the CISA KEV catalog on 2024-07-29. en Mon, 29 Jul 2024 00:00:00 GMT https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217 https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217#2024-07-29-1cbaa410 Mon, 29 Jul 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217 https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217#2024-07-29-e7f7b5c5 Mon, 29 Jul 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217 https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217#2024-07-10-699d5687 Wed, 10 Jul 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-4879">Source</a></p> https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217 https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217#2024-07-10-e4c458c4 Wed, 10 Jul 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-5217">Source</a></p>