Now Platform
Monthly
Sandbox escape in ServiceNow's Now Platform enables remote code execution within the platform environment, potentially granting attackers access beyond their intended permission level. Scored 8.7 under CVSS 4.0, the vulnerability is network-accessible with low complexity and high impacts on confidentiality, integrity, and availability of the vulnerable system. ServiceNow has deployed patches to hosted SaaS instances and provided updates to partners and self-hosted customers; no public exploit code and no known malicious exploitation have been identified at time of analysis.
Sandbox escape in ServiceNow's Now Platform enables remote code execution within the platform environment, potentially granting attackers access beyond their intended permission level. Scored 8.7 under CVSS 4.0, the vulnerability is network-accessible with low complexity and high impacts on confidentiality, integrity, and availability of the vulnerable system. ServiceNow has deployed patches to hosted SaaS instances and provided updates to partners and self-hosted customers; no public exploit code and no known malicious exploitation have been identified at time of analysis.