ServiceNow vulnerabilities
34 published CVEs name ServiceNow among the affected products; CISA lists 2 of them as exploited in the wild.
- 34Published CVEs34 of them scored
- 15Last 12 monthspublished in the last year
- 14Critical8 more rated high
- 2Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2024-5217
Incomplete Input Validation in GlideExpression Script
ServiceNow · Now Platform
ExploitedCritical9.2 - CVE-2024-4879
Jelly Template Injection Vulnerability in ServiceNow UI Macros
ServiceNow · Now Platform
ExploitedCritical9.3