Skip to content

Products › Brands

Brand

ServiceNow: actively exploited vulnerabilities

2 vulnerabilities in ServiceNow products (Now Platform) are in CISA’s catalog of exploited vulnerabilities. Last added: July 29, 2024.

By category

Add just one ServiceNow category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Now Platform2 vulnerabilities, Monitoring and ITSM

Name used by CISA: ServiceNow. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this ServiceNow list.

  1. Rank 1

    ServiceNow Now PlatformCVE-2024-4879

    ServiceNow Improper Input Validation Vulnerability

    CVSS severity 9.8critical

    Added Jul 29, 2024

  2. Rank 2

    ServiceNow Now PlatformCVE-2024-5217

    ServiceNow Incomplete List of Disallowed Inputs Vulnerability

    CVSS severity 9.8critical

    Added Jul 29, 2024

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.