Servicenow Now Platform vulnerabilities
11 published CVEs name Servicenow Now Platform among the affected products; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 11
- Last 12 months
- 0
- Critical
- 4
- Known exploited
- 2
Critical 4High 3Medium 4Low 0Not scored 0
CVEs per yearBy the year they were published
- 20233
- 20246
- 20252
Known exploitedNewest addition to KEV first
- CVE-2024-5217
Incomplete Input Validation in GlideExpression Script
ServiceNow · Now Platform
ExploitedCritical9.2 - CVE-2024-4879
Jelly Template Injection Vulnerability in ServiceNow UI Macros
ServiceNow · Now Platform
ExploitedCritical9.3
Newest CVEs
- CVE-2025-3648
Data Inference in Now Platform via Conditional ACLs
ServiceNow · Now Platform
High8.2 - CVE-2025-0337
Authorization bypass in Now Platform
ServiceNow · Now Platform
High7.1 - CVE-2024-5890
HTML Injection in the Assessment plugin
ServiceNow · Now Platform
Medium5.1 - CVE-2024-8924
Unauthenticated Blind SQL Injection in Core Platform
ServiceNow · Now Platform
High8.7 - CVE-2024-8923
Sandbox Escape in Now Platform
ServiceNow · Now Platform
Critical9.3 - CVE-2024-5217
Incomplete Input Validation in GlideExpression Script
ServiceNow · Now Platform
ExploitedCritical9.2 - CVE-2024-5178
Incomplete Input Validation in SecurelyAccess API
ServiceNow · Now Platform
Medium6.9 - CVE-2024-4879
Jelly Template Injection Vulnerability in ServiceNow UI Macros
ServiceNow · Now Platform
ExploitedCritical9.3 - CVE-2022-43684
ACL bypass in Reporting functionality
ServiceNow · Now Platform
Critical9.9 - CVE-2022-46389
Cross-Site Scripting (XSS) vulnerability found on logout functionality
ServiceNow · Now Platform
Medium6.1