Read the docs

ServiceNow

Records41All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

ServiceNow records in CISA KEV
TI-2024-04536 ServiceNow Improper Input Validation Vulnerability Priority CRITICAL 99KEV 2024-07-29TI-2024-04841 ServiceNow Incomplete List of Disallowed Inputs Vulnerability Priority CRITICAL 99KEV 2024-07-29

Components

Products in the NVD configurations · select one to filter the records
Servicenow 15 records CRITICAL It Service Management 2 records LOW Now Assist Ai Agents 1 record HIGH Virtual Agent Api 1 record HIGH

Records

2 records in It Service Management · all components

TI-2019-14988 CVE-2019-20768 · GHSA-pw7g-7762-p5qw

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and…

Priority LOW 26

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catal…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00719 Published 2020-05-05 No fix listed CWE-79
Open these records in search →