NP
Product
Now Platform
On CISA KEVExploited in the wild
5
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 2Low 0
Watch
Add Now Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-5217 In wildKEV | 9.8 | Jul 10 | Incomplete Input Validation in GlideExpression Script Affected: before Utah Patch 10 Hot Fix 3; before Utah Patch 10a Hot Fix 2; before Utah Patch 10b Hot Fix 1; before Vancouver Patch 6 Hot Fix 2; before Vancouver Patch 7 Hot Fix 3b; before Vancouver Patch 8 Hot Fix 4; +7 more |
| CVE-2024-4879 In wildKEV | 9.8 | Jul 10 | Jelly Template Injection Vulnerability in ServiceNow UI Macros Affected: before Utah Patch 10 Hot Fix 3; before Utah Patch 10a Hot Fix 2; before Vancouver Patch 6 Hot Fix 2; before Vancouver Patch 7 Hot Fix 3b; before Vancouver Patch 8 Hot Fix 4; before Vancouver Patch 9; +5 more |
| CVE-2025-3648 | 8.2 | Jul 8 | Data Inference in Now Platform via Conditional ACLs Affected: Aspen |
| CVE-2025-0337 | 6.5 | Mar 6 | Authorization bypass in Now Platform Affected: before Washington DC Patch 9; before Xanadu Patch 4; before Yokohama |
| CVE-2024-5890 | 4.3 | Dec 2 | HTML Injection in the Assessment plugin Affected: before Utah Patch 8 Hot Fix 1; before Vancouver Patch 10; before Vancouver Patch 9; before Washington DC Early Access |
Showing 5