[ Vendor · 9 CVEs ]
ServiceNow
CVEs affecting ServiceNow published in the last 30 days, plus any ServiceNow CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-86857 | 24 Sep 2026 | CVSS 8.4 | ServiceNow AI PlatformServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if… | |
| CVE-2026-86858 | 24 Sep 2026 | CVSS 8.7 | ServiceNow AI PlatformServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could… | |
| CVE-2026-86859 | 24 Sep 2026 | CVSS 8.7 | ServiceNow AI PlatformServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if… | |
| CVE-2026-86860 | 24 Sep 2026 | CVSS 9.3 | ServiceNow AI PlatformServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an… | |
| CVE-2026-13016 | 24 Sep 2026 | CVSS 9.3 | ServiceNow AI PlatformServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an… | |
| CVE-2024-4879 | 10 Jul 2024 | CVSS 9.8 | ServiceNow Improper Input ValidationServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This… | Exploited |
| CVE-2024-4879 | 10 Jul 2024 | CVSS 9.8 | ServiceNow Improper Input ValidationServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This… | Exploited |
| CVE-2024-5217 | 10 Jul 2024 | CVSS 9.8 | ServiceNow Incomplete List of Disallowed InputsServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases… | Exploited |
| CVE-2024-5217 | 10 Jul 2024 | CVSS 9.8 | ServiceNow Incomplete List of Disallowed InputsServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases… | Exploited |