SE
Vendor
ServiceNow
38
CVEs
6
On KEV
0
New 30D
Products
SE10.0
Servicenow
Servicenow
15 CVEs2 on KEV0 new
NP9.8
Now Platform
ServiceNow
3 CVEs2 on KEV0 new
UV9.8
Utah, Vancouver, and Washington DC Now Platform
ServiceNow
2 CVEs2 on KEV0 new
SA10.0
ServiceNow AI Platform
ServiceNow
14 CVEs0 on KEV0 new
IS5.4
IT Service Management
Servicenow
2 CVEs0 on KEV0 new
NA9.8
Now Assist AI Agents
ServiceNow
1 CVEs0 on KEV0 new
VA9.8
Virtual Agent API
ServiceNow
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-86860 | SA ServiceNow AI Platform ServiceNow | 9.3 | Sep 24 | Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform |
| CVE-2026-86859 | SA ServiceNow AI Platform ServiceNow | 8.7 | Sep 24 | Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform |
| CVE-2026-13016 | SA ServiceNow AI Platform ServiceNow | 9.3 | Sep 24 | Unauthenticated SQL Injection in ServiceNow AI Platform |
| CVE-2026-86858 | SA ServiceNow AI Platform ServiceNow | 8.7 | Sep 24 | Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform |
| CVE-2026-86857 | SA ServiceNow AI Platform ServiceNow | 8.4 | Sep 24 | Authorization Bypass in ServiceNow AI Platform |
| CVE-2026-74820 | SA ServiceNow AI Platform ServiceNow | 10.0 | Aug 27 | Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause |
| CVE-2026-18886 | SA ServiceNow AI Platform ServiceNow | 10.0 | Aug 27 | Unauthenticated Privilege Escalation via System Configuration Image Upload Processor |
| CVE-2026-18885 | SA ServiceNow AI Platform ServiceNow | 10.0 | Aug 27 | Unauthenticated Remote Code Execution in GraphQL Composite Data API |
| CVE-2026-6876 | SA ServiceNow AI Platform ServiceNow | 10.0 | Aug 27 | Sandbox Escape in ServiceNow AI Platform |
| CVE-2026-6875 | SA ServiceNow AI Platform ServiceNow | 9.5 | Jul 13 | Sandbox Escape in ServiceNow AI Platform |
| CVE-2026-0542 | SA ServiceNow AI Platform ServiceNow | 9.2 | Feb 25 | Remote Code Execution in ServiceNow AI Platform |
| CVE-2025-12420 | VA Virtual Agent API ServiceNow | 9.8 | Jan 12 | Unauthenticated Privilege Escalation in ServiceNow AI Platform |
| CVE-2025-11449 | SA ServiceNow AI Platform ServiceNow | 5.3 | Oct 10 | Reflected Cross Site Scripting in ServiceNow AI Platform |
| CVE-2025-11450 | SA ServiceNow AI Platform ServiceNow | 5.3 | Oct 10 | Reflected Cross Site Scripting in ServiceNow AI Platform |
| CVE-2025-3089 | SA ServiceNow AI Platform ServiceNow | 5.3 | Aug 12 | Broken Access Control in ServiceNow AI Platform |
| CVE-2025-3648 | NP Now Platform ServiceNow | 8.2 | Jul 8 | Data Inference in Now Platform via Conditional ACLs |
| CVE-2024-8924 | SE Servicenow Servicenow | 7.5 | Oct 29 | ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform |
| CVE-2024-8923 | SE Servicenow Servicenow | 10.0 | Oct 29 | ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform |
| CVE-2024-5217 In wildKEV | NP Now Platform ServiceNow | 9.8 | Jul 10 | Incomplete Input Validation in GlideExpression Script |
| CVE-2024-4879 In wildKEV | NP Now Platform ServiceNow | 9.8 | Jul 10 | Jelly Template Injection Vulnerability in ServiceNow UI Macros |
| CVE-2023-1298 | SE Servicenow Servicenow | 6.1 | Jul 6 | ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout |
| CVE-2022-43684 | SE Servicenow Servicenow | 6.5 | Jun 13 | ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality |
| CVE-2023-1209 | SE Servicenow Servicenow | 5.4 | May 23 | Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts |
| CVE-2022-46389 | SE Servicenow Servicenow | 6.1 | Apr 17 | There exists a reflected XSS within the logout functionality of ServiceNow versions lower than Quebec Patch 10 Hotfix 11b, Rome Patch 10 Hotfix 3b, San Diego Patch 9, Tokyo Patch… |
| CVE-2022-46886 | SE Servicenow Servicenow | 6.1 | Apr 14 | There exists an open redirect within the response list update functionality of ServiceNow |
| CVE-2022-39048 | SE Servicenow Servicenow | 6.1 | Apr 10 | A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect |
| CVE-2022-42704 | SE Servicenow Servicenow | 5.4 | Jan 13 | A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec, Rome, and San Diego allows remote attackers to inject… |
| CVE-2022-38463 | SE Servicenow Servicenow | 6.1 | Aug 23 | ServiceNow through San Diego Patch 4b and Patch 6 allows reflected XSS in the logout functionality |
| CVE-2022-38172 | SE Servicenow Servicenow | 6.1 | Aug 23 | ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard |
| CVE-2021-45901 | SE Servicenow Servicenow | 5.3 | Feb 10 | The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists |
| CVE-2019-20768 | IS IT Service Management Servicenow | 5.4 | May 5 | ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id… |
| CVE-2018-7748 | SE Servicenow Servicenow | 8.8 | Aug 3 | report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media… |
| CVE-2018-8720 | IS IT Service Management Servicenow | 5.4 | Mar 15 | ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal (aka search_results.do) |