ServiceNow Vulnerabilities and Affected Products
Vulnerabilities associated with Washington DC, Vancouver, and Utah Now Platform.
Products
Clear product- Now Platform11 vulnerabilities
- servicenow5 vulnerabilities
- ServiceNow AI Platform5 vulnerabilities
- Jenkins plug-in for ServiceNow DevOps2 vulnerabilities
- Utah, Vancouver, and Washington DC Now Platform2 vulnerabilities
- Now Assist AI Agents1 vulnerability
- Now User Experience1 vulnerability
- ServiceNow Records1 vulnerability
- Virtual Agent API1 vulnerability
- Washington DC, Vancouver, and Utah Now Platform1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-5178MEDIUM | Incomplete Input Validation in SecurelyAccess APIServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This vulnerability could allow an administrative user to gain unauthorized access to sensitive files on the web application server. The vulnerability is addressed in the listed patches and hot fixes, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance… CWE-184Jul 10, 2024 | CVSS6.9v4.0 | EPSS33.6% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |