SE
Product
Servicenow
On CISA KEVExploited in the wild
15
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 10Low 0
Watch
Add Servicenow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-7748 | 8.8 | Aug 3 | report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media… Affected: jakarta; jakarta; jakarta; jakarta; jakarta; jakarta; +6 more |
| CVE-2024-8924 | 7.5 | Oct 29 | Unauthenticated Blind SQL Injection in Core Platform Affected: xanadu; xanadu; xanadu; vancouver; vancouver; vancouver; +34 more |
Showing 2