Skip to contentServicenow Now Platform vulnerabilities
- servicenow now platformData Inference in Now Platform via Conditional ACLsCVE-2025-36488.2 High
- servicenow now platformAuthorization bypass in Now PlatformCVE-2025-03377.1 High
- servicenow now platformHTML Injection in the Assessment pluginCVE-2024-58905.1 Medium
- servicenow now platform, servicenow +1 moreUnauthenticated Blind SQL Injection in Core PlatformCVE-2024-89248.7 High
- servicenow now platform, servicenow +1 moreSandbox Escape in Now PlatformCVE-2024-89239.3 Critical
- servicenow now platform, servicenow, servicenow utah, vancouver, and washington dc now platform +2 moreIncomplete Input Validation in GlideExpression ScriptCVE-2024-5217In KEVEPSS 99.6%9.2 Critical
- servicenow now platformIncomplete Input Validation in SecurelyAccess APICVE-2024-5178EPSS 33.6%6.9 Medium
- servicenow now platform, servicenow, servicenow utah, vancouver, and washington dc now platform +2 moreJelly Template Injection Vulnerability in ServiceNow UI MacrosCVE-2024-4879In KEVPublic exploitEPSS 100.0%9.3 Critical
- servicenow, servicenow now platform +1 moreACL bypass in Reporting functionalityCVE-2022-436849.9 Critical
- servicenow, servicenow now platform +1 moreCross-Site Scripting (XSS) vulnerability found on logout functionalityCVE-2022-463896.1 Medium
- servicenow, servicenow now platform +1 moreCross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment_redirectCVE-2022-390486.1 Medium