NP
Product
Now Platform
On CISA KEVExploited in the wild
7
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 2Low 0
Watch
Add Now Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-5217 In wildKEV | 9.8 | Jul 10 | Incomplete Input Validation in GlideExpression Script Affected: before Utah Patch 10 Hot Fix 3; before Utah Patch 10a Hot Fix 2; before Utah Patch 10b Hot Fix 1; before Vancouver Patch 6 Hot Fix 2; before Vancouver Patch 7 Hot Fix 3b; before Vancouver Patch 8 Hot Fix 4; +7 more |
| CVE-2024-4879 In wildKEV | 9.8 | Jul 10 | Jelly Template Injection Vulnerability in ServiceNow UI Macros Affected: before Utah Patch 10 Hot Fix 3; before Utah Patch 10a Hot Fix 2; before Vancouver Patch 6 Hot Fix 2; before Vancouver Patch 7 Hot Fix 3b; before Vancouver Patch 8 Hot Fix 4; before Vancouver Patch 9; +5 more |
| CVE-2024-8923 | 10.0 | Oct 29 | Sandbox Escape in Now Platform Affected: before Vancouver Patch 9 Hot Fix 2a; before Vancouver Patch 10; before Washington DC Patch 4 Hot Fix 1a; before Washington DC Patch 5; before Xanadu GA Release |
Showing 3