ServiceNow AI Platform CVE-2025-11450

Exploitation requires a ServiceNow user to click an attacker-crafted link pointing at the vulnerable ServiceNow AI Platform (reflected XSS), per CVSS UI:P - this victim-interaction requirement is the primary limiting factor and means the attack cannot fire autonomously against the server. No attacker authentication is needed to deliver the payload (PR:N), and the payload executes only in the browser of the user who clicks, yielding client-side script execution rather than server compromise (vulnerable-system C/I/A all None; only subsequent-system integrity Low). Realistic impact is therefore bounded to whatever the victim's authenticated session permits. Affected deployments span most ServiceNow-hosted instances plus self-hosted/partner/unique-config customers until the KB2552817 update or listed patches/hot fixes are applied.

This is a reflected cross-site scripting flaw (CWE-79) in the ServiceNow AI Platform, rated CVSS 4.0 base 5.3 (Medium). The vendor-supplied vector (AV:N/AC:L/AT:N/PR:N/UI:P) indicates network-reachable, low-complexity exploitation requiring no attacker privileges but DOES require victim interaction (UI:P - the user must click a crafted link). Impact is constrained: all vulnerable-system impacts are None (VC:N/VI:N/VA:N) with only subsequent-system integrity Low (SI:L), consistent with script execution in the victim's browser context rather than server compromise. Exploitation signals are modest and mutually consistent: EPSS is 0.36% (27th percentile), there is NO CISA KEV listing, and NO public exploit code is referenced - so no public exploit identified at time of analysis. Net assessment: this is a genuine but lower-priority issue - a Medium-severity reflected XSS that needs user interaction and yields no direct server impact, not a widespread-exploitation emergency. CONFLICT TO NOTE: the input carries an 'RCE' tag, but the description explicitly scopes code execution to 'within the browsers of ServiceNow users' - this is client-side script execution (XSS), NOT server-side remote code execution; the RCE tag overstates the technical impact and should be treated with caution.

An attacker crafts a URL containing a malicious script payload targeting a vulnerable ServiceNow AI Platform endpoint and delivers it to a ServiceNow user (via phishing email, chat, or a planted link). When the victim clicks the link, the unsanitized payload is reflected back and executed in the victim's authenticated browser session, letting the attacker run script as that user - e.g., stealing session data or performing actions in the ServiceNow UI. No public exploit code is identified at time of analysis, and successful exploitation depends on the victim clicking the attacker-supplied link.