Servicenow
Monthly
Sandbox escape in the ServiceNow AI Platform lets an authenticated user holding the admin role bypass Rhino JavaScript sandbox restrictions and execute arbitrary code on the underlying host operating system, with potential for further unintended access. The flaw is rated 9.4 under CVSS 4.0 and maps to CWE-284 (improper access control), and because the privilege prerequisite (PR:H) is an admin session, the practical threat model is a privileged insider or an attacker who has already compromised an admin account rather than an unauthenticated remote adversary; no user interaction is required. ServiceNow states it has already updated hosted instances and shipped the fix to partners and self-hosted customers, and that it is not aware of malicious exploitation, so residual exposure sits with self-hosted and partner-managed deployments that have not yet applied the update; no public exploit code has been identified at time of analysis, and the vendor advisory does not publish a specific triggering path.
Plaintext password disclosure in ServiceNow AI Platform occurs when the platform unintentionally persists a user's cleartext credential in a system table, allowing an authenticated low-privileged user who can view that table to read a password they are not entitled to see. Exploitation requires a valid account and that the unintended persistence actually occurred; no victim interaction is required. ServiceNow has released fixed patch levels, states it is not aware of malicious exploitation, and no public exploit identified at time of analysis.
Missing authorization in the ServiceNow AI Platform lets unauthenticated remote attackers, under certain vendor-undisclosed instance conditions, read instance data beyond the intended scope and escalate privileges. ServiceNow has remediated the flaw on its hosted instances and distributed the fix to partners and self-hosted customers, but no public exploit code or active exploitation has been reported and no EPSS score was supplied with the source data. The vendor CVSS 4.0 rating is Critical (9.3), while the independent assessment is lower and treats exploitation as conditional, so unpatched self-hosted or partner-managed instances should still be prioritized given the data-exposure and privilege-escalation potential.
Unauthenticated data disclosure in ServiceNow AI Platform instances stems from an authorization bypass (CVSS 8.7) that lets remote attackers read records they are not entitled to access. ServiceNow has already remediated its hosted instances, so exposure now concentrates on self-hosted and partner-managed deployments that have not applied the KB3159623 update or upgraded to a patched release. No public exploit code has been identified and no confirmed active exploitation (CISA KEV) has been reported, yet this remains a genuine priority for ServiceNow customers even in the absence of exploitation telemetry.
Unauthenticated SQL injection in the ServiceNow AI Platform allows remote attackers to execute arbitrary SQL statements against an instance's underlying database, potentially reading or altering instance data beyond its intended scope. ServiceNow has already remediated its hosted instances and shipped the update to partners and self-hosted customers, so residual exposure is confined to self-hosted or partner-managed deployments that have not yet moved to the patched release described in KB3159623. No public exploit code has been identified and the vendor states it is not aware of malicious exploitation at time of analysis, but the 9.3 CVSS 4.0 rating - along with a more conservative independent assessment that raises attack complexity to High and lowers availability impact - makes prompt patching of any remaining unpatched instance the priority.
Unauthenticated network requests against unpatched ServiceNow AI Platform instances can create, modify, or delete instance data beyond what was intended, per a vendor-remediated improper access control flaw rated 8.7 under CVSS 4.0 (independent assessment: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). Impact is integrity-only - no confidentiality or availability loss is described - and ServiceNow scopes exploitation to "certain circumstances," so the flaw is not universally reachable on every default deployment and undisclosed configuration preconditions appear to gate it. ServiceNow patched hosted instances in August 2026 and shipped the update to partners and self-hosted customers, leaving residual exposure concentrated in self-hosted and partner-managed instances that have not yet applied it. No public exploit code and no confirmed active exploitation (no CISA KEV listing) were identified at time of analysis.
Authorization bypass in the ServiceNow AI Platform lets any authenticated user with an ordinary low-privilege account read records and data they are not entitled to, and because the flaw crosses a security scope boundary it can also enable further unintended access on resources beyond the vulnerable component. Exploitation is network-reachable and requires only a valid low-privilege session - no elevated role, no user interaction, and no special client configuration - so the practical attack path is a compromised, internal, or low-tier tenant account rather than an anonymous attacker. ServiceNow has already remediated hosted instances and distributed the update to partners and self-hosted customers, and the vendor states it is not aware of malicious exploitation; no public exploit code or CISA KEV entry was identified at time of analysis, leaving unpatched self-hosted and partner deployments as the primary exposure.
SQL injection in the ServiceNow AI Platform allows an unauthenticated attacker, under certain conditions, to execute arbitrary SQL statements against the instance's underlying database, enabling unauthorized read and modification of instance data beyond intended boundaries. The flaw carries a maximum CVSS 4.0 base score of 10.0 (network, no authentication, high impact to confidentiality, integrity, and availability, with scope-changing impact to subsequent systems). ServiceNow, which self-reported the issue, states it has no public exploit identified at time of analysis and is not currently aware of malicious exploitation.
Improper access control in the ServiceNow AI Platform allows an unauthenticated user, under certain circumstances, to create or modify instance data beyond intended boundaries, resulting in privilege escalation. ServiceNow has patched hosted instances and supplied updates to partners and self-hosted customers; the vendor rates this maximum severity (CVSS 4.0 10.0) but reports no known exploitation. No public exploit identified at time of analysis.
Remote code execution in the ServiceNow AI Platform lets an unauthenticated attacker, under certain unspecified circumstances, inject and run arbitrary code within a ServiceNow instance and read or modify instance data beyond intended authorization boundaries. ServiceNow rates it CVSS 4.0 10.0 (maximum) with a fully unauthenticated network vector and total confidentiality, integrity, and availability impact including subsequent-system impact. There is no public exploit identified at time of analysis, and ServiceNow states it is not currently aware of malicious exploitation.
Remote code execution in ServiceNow Now Platform allows an unauthenticated attacker to escape the platform's scripting sandbox and execute arbitrary code, gaining more access to the instance than intended. ServiceNow rates this maximum severity (CVSS 4.0 base 10.0) and has patched hosted instances while shipping fixes to self-hosted and partner deployments across the Zurich, Australia, Xanadu, and Yokohama release families. No public exploit identified at time of analysis and ServiceNow states it is not aware of malicious exploitation, though the unauthenticated, network-reachable nature makes prompt patching essential.
Remote code execution in the ServiceNow AI Platform allows an unauthenticated attacker, under certain (unspecified) circumstances, to execute arbitrary code within the ServiceNow platform, carrying a critical CVSS 4.0 base score of 9.5. ServiceNow has patched hosted instances directly and issued fixes to self-hosted customers and partners; there is no public exploit identified at time of analysis, and the vendor states it is not currently aware of exploitation. The high CVSS complexity metric (AC:H) indicates the exploit is not trivially reproducible against arbitrary instances, tempering the otherwise maximal impact rating.
ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Domain separation bypass in ServiceNow AI Platform's SR - CSM - Task Plan Templates Store application allows an authenticated user with a specific role to create records in domains they do not have access to. Only deployments with the affected store application before Task Plan Templates v3.0 are implicated; the impact is limited to cross-domain data integrity, with confidentiality and availability unaffected. No malicious exploitation has been reported and no public exploit identified at time of analysis; the issue is rated CVSS 5.3 medium.
ServiceNow AI Platform has a user impersonation vulnerability allowing unauthenticated attackers to impersonate any user and perform their authorized actions. ServiceNow has deployed patches to hosted instances and self-hosted updates are available.
Reflected cross-site scripting (XSS) in the ServiceNow AI Platform allows remote attackers to execute arbitrary JavaScript in the browser of a victim user who clicks a crafted link. The vulnerability requires user interaction (UI:P) and no authentication (PR:N), but impact is limited to the victim's authenticated session; no server-side compromise occurs. With an EPSS score of 0.36% (27th percentile) and no public exploit identified at time of analysis, the risk is moderate, though ServiceNow has released patches and hot fixes referenced in KB2552817.
Reflected cross-site scripting in the ServiceNow AI Platform lets unauthenticated attackers craft a specially crafted link that executes arbitrary JavaScript in the browser of a ServiceNow user who clicks it, potentially leading to session integrity compromise or actions performed in the user's context. ServiceNow has deployed security updates to the majority of hosted instances, but self-hosted customers and uniquely configured hosted customers must apply the provided patches or hot fixes. Exploitation requires victim interaction (UI:R) and is limited to the browser session (SI:L); independent assessment rates this as medium severity, with low EPSS (0.36%), no public exploit code identified at time of analysis, and no CISA KEV listing.
ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
ServiceNow through San Diego Patch 4b and Patch 6 allows reflected XSS in the logout functionality. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal (aka search_results.do). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Sandbox escape in the ServiceNow AI Platform lets an authenticated user holding the admin role bypass Rhino JavaScript sandbox restrictions and execute arbitrary code on the underlying host operating system, with potential for further unintended access. The flaw is rated 9.4 under CVSS 4.0 and maps to CWE-284 (improper access control), and because the privilege prerequisite (PR:H) is an admin session, the practical threat model is a privileged insider or an attacker who has already compromised an admin account rather than an unauthenticated remote adversary; no user interaction is required. ServiceNow states it has already updated hosted instances and shipped the fix to partners and self-hosted customers, and that it is not aware of malicious exploitation, so residual exposure sits with self-hosted and partner-managed deployments that have not yet applied the update; no public exploit code has been identified at time of analysis, and the vendor advisory does not publish a specific triggering path.
Plaintext password disclosure in ServiceNow AI Platform occurs when the platform unintentionally persists a user's cleartext credential in a system table, allowing an authenticated low-privileged user who can view that table to read a password they are not entitled to see. Exploitation requires a valid account and that the unintended persistence actually occurred; no victim interaction is required. ServiceNow has released fixed patch levels, states it is not aware of malicious exploitation, and no public exploit identified at time of analysis.
Missing authorization in the ServiceNow AI Platform lets unauthenticated remote attackers, under certain vendor-undisclosed instance conditions, read instance data beyond the intended scope and escalate privileges. ServiceNow has remediated the flaw on its hosted instances and distributed the fix to partners and self-hosted customers, but no public exploit code or active exploitation has been reported and no EPSS score was supplied with the source data. The vendor CVSS 4.0 rating is Critical (9.3), while the independent assessment is lower and treats exploitation as conditional, so unpatched self-hosted or partner-managed instances should still be prioritized given the data-exposure and privilege-escalation potential.
Unauthenticated data disclosure in ServiceNow AI Platform instances stems from an authorization bypass (CVSS 8.7) that lets remote attackers read records they are not entitled to access. ServiceNow has already remediated its hosted instances, so exposure now concentrates on self-hosted and partner-managed deployments that have not applied the KB3159623 update or upgraded to a patched release. No public exploit code has been identified and no confirmed active exploitation (CISA KEV) has been reported, yet this remains a genuine priority for ServiceNow customers even in the absence of exploitation telemetry.
Unauthenticated SQL injection in the ServiceNow AI Platform allows remote attackers to execute arbitrary SQL statements against an instance's underlying database, potentially reading or altering instance data beyond its intended scope. ServiceNow has already remediated its hosted instances and shipped the update to partners and self-hosted customers, so residual exposure is confined to self-hosted or partner-managed deployments that have not yet moved to the patched release described in KB3159623. No public exploit code has been identified and the vendor states it is not aware of malicious exploitation at time of analysis, but the 9.3 CVSS 4.0 rating - along with a more conservative independent assessment that raises attack complexity to High and lowers availability impact - makes prompt patching of any remaining unpatched instance the priority.
Unauthenticated network requests against unpatched ServiceNow AI Platform instances can create, modify, or delete instance data beyond what was intended, per a vendor-remediated improper access control flaw rated 8.7 under CVSS 4.0 (independent assessment: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). Impact is integrity-only - no confidentiality or availability loss is described - and ServiceNow scopes exploitation to "certain circumstances," so the flaw is not universally reachable on every default deployment and undisclosed configuration preconditions appear to gate it. ServiceNow patched hosted instances in August 2026 and shipped the update to partners and self-hosted customers, leaving residual exposure concentrated in self-hosted and partner-managed instances that have not yet applied it. No public exploit code and no confirmed active exploitation (no CISA KEV listing) were identified at time of analysis.
Authorization bypass in the ServiceNow AI Platform lets any authenticated user with an ordinary low-privilege account read records and data they are not entitled to, and because the flaw crosses a security scope boundary it can also enable further unintended access on resources beyond the vulnerable component. Exploitation is network-reachable and requires only a valid low-privilege session - no elevated role, no user interaction, and no special client configuration - so the practical attack path is a compromised, internal, or low-tier tenant account rather than an anonymous attacker. ServiceNow has already remediated hosted instances and distributed the update to partners and self-hosted customers, and the vendor states it is not aware of malicious exploitation; no public exploit code or CISA KEV entry was identified at time of analysis, leaving unpatched self-hosted and partner deployments as the primary exposure.
SQL injection in the ServiceNow AI Platform allows an unauthenticated attacker, under certain conditions, to execute arbitrary SQL statements against the instance's underlying database, enabling unauthorized read and modification of instance data beyond intended boundaries. The flaw carries a maximum CVSS 4.0 base score of 10.0 (network, no authentication, high impact to confidentiality, integrity, and availability, with scope-changing impact to subsequent systems). ServiceNow, which self-reported the issue, states it has no public exploit identified at time of analysis and is not currently aware of malicious exploitation.
Improper access control in the ServiceNow AI Platform allows an unauthenticated user, under certain circumstances, to create or modify instance data beyond intended boundaries, resulting in privilege escalation. ServiceNow has patched hosted instances and supplied updates to partners and self-hosted customers; the vendor rates this maximum severity (CVSS 4.0 10.0) but reports no known exploitation. No public exploit identified at time of analysis.
Remote code execution in the ServiceNow AI Platform lets an unauthenticated attacker, under certain unspecified circumstances, inject and run arbitrary code within a ServiceNow instance and read or modify instance data beyond intended authorization boundaries. ServiceNow rates it CVSS 4.0 10.0 (maximum) with a fully unauthenticated network vector and total confidentiality, integrity, and availability impact including subsequent-system impact. There is no public exploit identified at time of analysis, and ServiceNow states it is not currently aware of malicious exploitation.
Remote code execution in ServiceNow Now Platform allows an unauthenticated attacker to escape the platform's scripting sandbox and execute arbitrary code, gaining more access to the instance than intended. ServiceNow rates this maximum severity (CVSS 4.0 base 10.0) and has patched hosted instances while shipping fixes to self-hosted and partner deployments across the Zurich, Australia, Xanadu, and Yokohama release families. No public exploit identified at time of analysis and ServiceNow states it is not aware of malicious exploitation, though the unauthenticated, network-reachable nature makes prompt patching essential.
Remote code execution in the ServiceNow AI Platform allows an unauthenticated attacker, under certain (unspecified) circumstances, to execute arbitrary code within the ServiceNow platform, carrying a critical CVSS 4.0 base score of 9.5. ServiceNow has patched hosted instances directly and issued fixes to self-hosted customers and partners; there is no public exploit identified at time of analysis, and the vendor states it is not currently aware of exploitation. The high CVSS complexity metric (AC:H) indicates the exploit is not trivially reproducible against arbitrary instances, tempering the otherwise maximal impact rating.
ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Domain separation bypass in ServiceNow AI Platform's SR - CSM - Task Plan Templates Store application allows an authenticated user with a specific role to create records in domains they do not have access to. Only deployments with the affected store application before Task Plan Templates v3.0 are implicated; the impact is limited to cross-domain data integrity, with confidentiality and availability unaffected. No malicious exploitation has been reported and no public exploit identified at time of analysis; the issue is rated CVSS 5.3 medium.
ServiceNow AI Platform has a user impersonation vulnerability allowing unauthenticated attackers to impersonate any user and perform their authorized actions. ServiceNow has deployed patches to hosted instances and self-hosted updates are available.
Reflected cross-site scripting (XSS) in the ServiceNow AI Platform allows remote attackers to execute arbitrary JavaScript in the browser of a victim user who clicks a crafted link. The vulnerability requires user interaction (UI:P) and no authentication (PR:N), but impact is limited to the victim's authenticated session; no server-side compromise occurs. With an EPSS score of 0.36% (27th percentile) and no public exploit identified at time of analysis, the risk is moderate, though ServiceNow has released patches and hot fixes referenced in KB2552817.
Reflected cross-site scripting in the ServiceNow AI Platform lets unauthenticated attackers craft a specially crafted link that executes arbitrary JavaScript in the browser of a ServiceNow user who clicks it, potentially leading to session integrity compromise or actions performed in the user's context. ServiceNow has deployed security updates to the majority of hosted instances, but self-hosted customers and uniquely configured hosted customers must apply the provided patches or hot fixes. Exploitation requires victim interaction (UI:R) and is limited to the browser session (SI:L); independent assessment rates this as medium severity, with low EPSS (0.36%), no public exploit code identified at time of analysis, and no CISA KEV listing.
ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
ServiceNow through San Diego Patch 4b and Patch 6 allows reflected XSS in the logout functionality. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal (aka search_results.do). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.