ServiceNow AI Platform vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SA

Product

ServiceNow AI Platform

by ServiceNow · last CVE Sep 24, 2026

14

CVEs

0

On KEV

10.0

Max CVSS

0

New 30D

Vulnerabilities14 In the news3 Timeline

Severity mix

Critical 8High 3Medium 3Low 0

Severity

All severities14 Critical8 High3 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ServiceNow AI Platform to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-11449	5.3	0%	Oct 10	Reflected Cross Site Scripting in ServiceNow AI Platform Affected: before Washington DC Patch 10 Hot Fix 7b; before Xanadu Patch 10 Hot Fix 1a; before Xanadu Patch 11; before Yokohama Patch 7 Hot Fix 2a; before Yokohama Patch 8; before Yokohama Patch 9; +4 more
CVE-2025-11450	5.3	0%	Oct 10	Reflected Cross Site Scripting in ServiceNow AI Platform Affected: before Washington DC Patch 10 Hot Fix 7b; before Xanadu Patch 10 Hot Fix 1a; before Xanadu Patch 11; before Yokohama Patch 7 Hot Fix 2a; before Yokohama Patch 8; before Yokohama Patch 9; +4 more
CVE-2025-3089	5.3	0%	Aug 12	Broken Access Control in ServiceNow AI Platform Affected: Aspen before Washington DC Patch 10 Hot Fix 2a; Aspen before Xanadu Patch 7a; Aspen before Xanadu Patch 8; Aspen before Yokohama Patch 1a; Aspen before Yokohama Patch 2; Aspen before Zurich (EA)