What’s Vulnerable › Products

ServiceNow vulnerabilities

15 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your ServiceNow version is affected

Exploited ServiceNow vulnerabilities

• CVE-2024-5217 — ServiceNow Incomplete List of Disallowed Inputs Vulnerability
• CVE-2024-4879 — ServiceNow Improper Input Validation Vulnerability

Latest ServiceNow vulnerabilities

• CVE-2024-8924 — Unauthenticated Blind SQL Injection in Core Platform (CVSS 7.5)
• CVE-2024-8923 — Sandbox Escape in Now Platform (CVSS 10.0)
• CVE-2024-5217 — ServiceNow Incomplete List of Disallowed Inputs Vulnerability (CVSS 9.8) — exploited
• CVE-2024-4879 — ServiceNow Improper Input Validation Vulnerability (CVSS 9.8) — exploited
• CVE-2023-1298 — (CVSS 6.1)
• CVE-2022-43684 — ACL bypass in Reporting functionality (CVSS 6.5)
• CVE-2023-1209 — (CVSS 5.4)
• CVE-2022-46389 — Cross-Site Scripting (XSS) vulnerability found on logout functionality (CVSS 6.1)
• CVE-2022-46886 — (CVSS 6.1)
• CVE-2022-39048 — Cross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment_redirect (CVSS 6.1)
• CVE-2022-42704 — (CVSS 5.4)
• CVE-2022-38463 — (CVSS 6.1)
• CVE-2022-38172 — (CVSS 6.1)
• CVE-2021-45901 — (CVSS 5.3)
• CVE-2018-7748 — (CVSS 8.8)