Read the docs

ServiceNow

Records41All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

ServiceNow records in CISA KEV
TI-2024-04536 ServiceNow Improper Input Validation Vulnerability Priority CRITICAL 99KEV 2024-07-29TI-2024-04841 ServiceNow Incomplete List of Disallowed Inputs Vulnerability Priority CRITICAL 99KEV 2024-07-29

Components

Products in the NVD configurations · select one to filter the records
Servicenow 15 records CRITICAL It Service Management 2 records LOW Now Assist Ai Agents 1 record HIGH Virtual Agent Api 1 record HIGH

Records

1 record in Virtual Agent Api · all components

TI-2025-11396 CVE-2025-12420 · GHSA-mwg5-cwh8-88m5

Unauthenticated Privilege Escalation in ServiceNow AI Platform

Priority HIGH 80

A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.53188 Published 2026-01-12 Fixed in 3.15.2, 4.0.4 CWE-250
Open these records in search →