NP
Product
Now Platform
by ServiceNow · last CVE Jul 8, 2025
On CISA KEVExploited in the wild
7
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 2Low 0
Watch

Add Now Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5217
In wildKEV
9.8
100%
Jul 10
Incomplete Input Validation in GlideExpression Script
Affected: before Utah Patch 10 Hot Fix 3; before Utah Patch 10a Hot Fix 2; before Utah Patch 10b Hot Fix 1; before Vancouver Patch 6 Hot Fix 2; before Vancouver Patch 7 Hot Fix 3b; before Vancouver Patch 8 Hot Fix 4; +7 more
CVE-2024-4879
In wildKEV
9.8
100%
Jul 10
Jelly Template Injection Vulnerability in ServiceNow UI Macros
Affected: before Utah Patch 10 Hot Fix 3; before Utah Patch 10a Hot Fix 2; before Vancouver Patch 6 Hot Fix 2; before Vancouver Patch 7 Hot Fix 3b; before Vancouver Patch 8 Hot Fix 4; before Vancouver Patch 9; +5 more
Showing 2