{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T20:45:43.249Z",
  "tag": {
    "id": "servicenow",
    "label": "ServiceNow",
    "isStack": false,
    "url": "https://pwn.watch/t/servicenow",
    "feed": "https://pwn.watch/t/servicenow/feed.xml"
  },
  "counts": {
    "incidents": 1,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 1
  },
  "incidents": [
    {
      "slug": "servicenow-utah-vancouver-and-washington-cve-2024-4879-5217",
      "title": "ServiceNow Utah, Vancouver, and Washington DC Now Platform: 2 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217",
      "json": "https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "ServiceNow Utah, Vancouver, and Washington DC Now Platform",
      "tags": [
        "servicenow",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-4879",
        "CVE-2024-5217"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-07-10",
      "closedAt": "2024-07-29",
      "updatedAt": "2024-07-29",
      "summary": "CVE-2024-4879: ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. CVE-2024-5217: ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely. Added to the CISA KEV catalog on 2024-07-29.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "servicenow-utah-vancouver-and-washington-cve-2024-4879-5217",
      "incidentTitle": "ServiceNow Utah, Vancouver, and Washington DC Now Platform: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-29",
      "title": "CISA added CVE-2024-4879 to the KEV catalog (federal deadline 2024-08-19)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217"
    },
    {
      "incident": "servicenow-utah-vancouver-and-washington-cve-2024-4879-5217",
      "incidentTitle": "ServiceNow Utah, Vancouver, and Washington DC Now Platform: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-29",
      "title": "CISA added CVE-2024-5217 to the KEV catalog (federal deadline 2024-08-19)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217"
    },
    {
      "incident": "servicenow-utah-vancouver-and-washington-cve-2024-4879-5217",
      "incidentTitle": "ServiceNow Utah, Vancouver, and Washington DC Now Platform: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-10",
      "title": "CVE-2024-4879 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-4879",
      "url": "https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217"
    },
    {
      "incident": "servicenow-utah-vancouver-and-washington-cve-2024-4879-5217",
      "incidentTitle": "ServiceNow Utah, Vancouver, and Washington DC Now Platform: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-07-10",
      "title": "CVE-2024-5217 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-5217",
      "url": "https://pwn.watch/i/servicenow-utah-vancouver-and-washington-cve-2024-4879-5217"
    }
  ]
}