ZeusQA
Start free

Known exploited vulnerabilities

ServiceNow vulnerabilities attackers have used

Every ServiceNow vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 ServiceNow vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2024-5217, added Jul 29, 2024. Utah, Vancouver, and Washington DC Now Platform has the most entries (2).

In KEV, all time
2
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every ServiceNow entry in CISA KEV

  1. CVE-2024-5217

    Added · due

    ServiceNow Incomplete List of Disallowed Inputs Vulnerability

    ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code…

  2. CVE-2024-4879

    Added · due

    ServiceNow Improper Input Validation Vulnerability

    ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works