Security Digest
ServiceNow: known exploited vulnerabilities
2 ServiceNow CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2024-07-29 | CVE-2024-5217 | ServiceNow Utah, Vancouver, and Washington DC Now Platform ServiceNow Incomplete List of Disallowed Inputs Vulnerability | 2024-08-19 |
| 2024-07-29 | CVE-2024-4879 | ServiceNow Utah, Vancouver, and Washington DC Now Platform ServiceNow Improper Input Validation Vulnerability | 2024-08-19 |