https://vulnogram.org/ Most recent CVEs assigned by ServiceNow (sn). https://vulnogram.org/seaview/icons/sn.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-86860 https://vulnogram.org/CVE-2026-86860 ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, r… Critical Network Exploitable Thu, 24 Sep 2026 18:56:54 GMT https://vulnogram.org/CVE-2026-86859 https://vulnogram.org/CVE-2026-86859 ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user… High Network Exploitable Thu, 24 Sep 2026 18:52:51 GMT https://vulnogram.org/CVE-2026-13016 https://vulnogram.org/CVE-2026-13016 ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's u… Critical Network Exploitable Thu, 24 Sep 2026 18:48:50 GMT https://vulnogram.org/CVE-2026-86858 https://vulnogram.org/CVE-2026-86858 ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in certain circumstances, to create, modify, or delete instance data beyo… High Network Exploitable Thu, 24 Sep 2026 18:42:40 GMT https://vulnogram.org/CVE-2026-86857 https://vulnogram.org/CVE-2026-86857 ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an authenticated user to access data within the ServiceNow AI Platform that the user o… High Thu, 24 Sep 2026 18:37:47 GMT https://vulnogram.org/CVE-2026-74820 https://vulnogram.org/CVE-2026-74820 ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance'… Critical Network Exploitable Thu, 27 Aug 2026 19:05:04 GMT https://vulnogram.org/CVE-2026-18886 https://vulnogram.org/CVE-2026-18886 ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to create or modify instance data beyond what was… Critical Network Exploitable Thu, 27 Aug 2026 19:00:01 GMT https://vulnogram.org/CVE-2026-18885 https://vulnogram.org/CVE-2026-18885 ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary code in the ServiceNow platform and ga… Critical Network Exploitable Thu, 27 Aug 2026 18:54:14 GMT https://vulnogram.org/CVE-2026-6876 https://vulnogram.org/CVE-2026-6876 ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This security issue could allow an unauthenticated user to execute arbitrary code within the ServiceNow AI Platform, potentially leading to m… Critical Network Exploitable Thu, 27 Aug 2026 18:46:04 GMT https://vulnogram.org/CVE-2026-6875 https://vulnogram.org/CVE-2026-6875 ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow platform. Servi… Critical Network Exploitable Mon, 13 Jul 2026 18:17:27 GMT https://vulnogram.org/CVE-2026-0542 https://vulnogram.org/CVE-2026-0542 ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute code within the ServiceNow Sandbox. Servic… Critical Network Exploitable Wed, 25 Feb 2026 20:35:27 GMT https://vulnogram.org/CVE-2025-12420 https://vulnogram.org/CVE-2025-12420 A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulner… Critical Network Exploitable Mon, 12 Jan 2026 21:29:37 GMT https://vulnogram.org/CVE-2025-11449 https://vulnogram.org/CVE-2025-11449 ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a special… Medium Network Exploitable Fri, 10 Oct 2025 01:15:41 GMT https://vulnogram.org/CVE-2025-11450 https://vulnogram.org/CVE-2025-11450 ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being executed within the browsers of ServiceNow users who click on a special… Medium Network Exploitable Fri, 10 Oct 2025 01:09:54 GMT https://vulnogram.org/CVE-2025-3089 https://vulnogram.org/CVE-2025-3089 ServiceNow has addressed a Broken Access Control vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could allow a low privileged user to bypass access controls and perform a limited set of actions typically reserved f… Medium Tue, 12 Aug 2025 16:06:39 GMT https://vulnogram.org/CVE-2025-3648 https://vulnogram.org/CVE-2025-3648 A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization. Under certain conditional access control list (ACL) configurations, this vulnerability could enable unauthenticated and authentica… High Network Exploitable Tue, 08 Jul 2025 16:07:11 GMT https://vulnogram.org/CVE-2025-0337 https://vulnogram.org/CVE-2025-0337 ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored with… High Thu, 06 Mar 2025 16:29:12 GMT https://vulnogram.org/CVE-2024-5890 https://vulnogram.org/CVE-2024-5890 ServiceNow has addressed an HTML injection vulnerability that was identified in the Now Platform. This vulnerability could potentially enable an unauthenticated user to modify a web page or redirect users to another website. ServiceNow released updat… Medium Network Exploitable Mon, 02 Dec 2024 18:24:55 GMT https://vulnogram.org/CVE-2024-8924 https://vulnogram.org/CVE-2024-8924 ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and… High Network Exploitable Tue, 29 Oct 2024 16:14:38 GMT https://vulnogram.org/CVE-2024-8923 https://vulnogram.org/CVE-2024-8923 ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow deployed an update… Critical Network Exploitable Tue, 29 Oct 2024 16:07:07 GMT https://vulnogram.org/CVE-2024-5217 https://vulnogram.org/CVE-2024-5217 ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of… Critical Known Exploited Network Exploitable Wed, 10 Jul 2024 16:28:32 GMT https://vulnogram.org/CVE-2024-5178 https://vulnogram.org/CVE-2024-5178 ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This vulnerability could allow an administrative user to gain unauthorized access to sensitive files on… Medium Wed, 10 Jul 2024 16:23:39 GMT https://vulnogram.org/CVE-2024-4879 https://vulnogram.org/CVE-2024-4879 ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platfo… Critical Known Exploited Network Exploitable Wed, 10 Jul 2024 16:16:39 GMT https://vulnogram.org/CVE-2023-3442 https://vulnogram.org/CVE-2023-3442 A missing authorization vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1… High Wed, 26 Jul 2023 18:32:19 GMT https://vulnogram.org/CVE-2023-3414 https://vulnogram.org/CVE-2023-3414 A cross-site request forgery vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1… Medium Network Exploitable Wed, 26 Jul 2023 18:20:18 GMT https://vulnogram.org/CVE-2023-1298 https://vulnogram.org/CVE-2023-1298 ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts. Medium Network Exploitable Thu, 06 Jul 2023 17:13:27 GMT https://vulnogram.org/CVE-2022-43684 https://vulnogram.org/CVE-2022-43684 ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: * Quebec prior to Patch 1… Critical Tue, 13 Jun 2023 18:51:39 GMT https://vulnogram.org/CVE-2023-1209 https://vulnogram.org/CVE-2023-1209 Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts. Medium Network Exploitable Tue, 23 May 2023 16:41:28 GMT https://vulnogram.org/CVE-2022-46389 https://vulnogram.org/CVE-2022-46389 There exists a reflected XSS within the logout functionality of ServiceNow versions lower than Quebec Patch 10 Hotfix 11b, Rome Patch 10 Hotfix 3b, San Diego Patch 9, Tokyo Patch 4, and Utah GA. This enables an unauthenticated remote attacker to exec… Medium Network Exploitable Mon, 17 Apr 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-46886 https://vulnogram.org/CVE-2022-46886 There exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redirect users to arbitrary domains when clicking on a URL within a service-now domain. Medium Fri, 14 Apr 2023 00:00:00 GMT https://vulnogram.org/CVE-2022-39048 https://vulnogram.org/CVE-2022-39048 A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an attacker would need to persuade an authenticated user to click a maliciously crafted URL. Successful exploitation potentially could be… Medium Network Exploitable Mon, 10 Apr 2023 00:00:00 GMT