ServiceNow
Security incidents tagged ServiceNow. Newest first.
0 ServiceNow incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 815
- Longest quiet run: 815 days (Jul 30–Oct 22)
Show 1 older incident1 older incident
July 2024 1
PatchedServiceNow Utah, Vancouver, and Washington DC Now Platform: 2 actively exploited vulnerabilities
ServiceNow Utah, Vancouver, and Washington DC Now Platform
CVE-2024-4879: ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. CVE-2024-5217: ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely. Added to the CISA KEV catalog on 2024-07-29.
Open incident →CVE-2024-4879 · CVE-2024-5217
