ServiceNow Now Platform

• CVE-2024-5217 Critical 9.8 Exploited Incomplete Input Validation in GlideExpression Script 99.6%
• CVE-2024-4879 Critical 9.8 Exploited Jelly Template Injection Vulnerability in ServiceNow UI Macros 100.0%
• CVE-2025-3648 High 8.2 Data Inference in Now Platform via Conditional ACLs 1.7%
• CVE-2025-0337 Medium 6.5 Authorization bypass in Now Platform 0.4%
• CVE-2024-5890 Medium 4.3 HTML Injection in the Assessment plugin 0.3%
• CVE-2024-8924 High 7.5 Unauthenticated Blind SQL Injection in Core Platform 0.5%
• CVE-2024-8923 Critical 9.8 Sandbox Escape in Now Platform 1.1%
• CVE-2024-5178 Medium 4.9 Incomplete Input Validation in SecurelyAccess API 33.6%
• CVE-2022-43684 Critical 9.9 ACL bypass in Reporting functionality 1.8%
• CVE-2022-46389 Medium 6.1 Cross-Site Scripting (XSS) vulnerability found on logout functionality 0.6%
• CVE-2022-39048 Medium 6.1 Cross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment_redirect 1.1%