Read the docs
TI-2024-08286 Aliases CVE-2024-8923GHSA-qpr4-w3rc-m373

Sandbox Escape in Now Platform

Priority MEDIUM 50CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-94.

Summary

ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow deployed an update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01109 66th percentileScored 2026-11-07
Fix Fixed Now Platform (ServiceNow): Vancouver Patch 9 Hot Fix 2a, Vancouver Patch 10, Washington DC Patch 4 Hot Fix 1a +2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ServiceNowNow Platformbefore Vancouver Patch 9 Hot Fix 2a; before Vancouver Patch 10; before Washington DC Patch 4 Hot Fix 1a; before Washington DC Patch 5; before Xanadu GA ReleaseVancouver Patch 9 Hot Fix 2a, Vancouver Patch 10, Washington DC Patch 4 Hot Fix 1a, Washington DC Patch 5, Xanadu GA ReleasePatch availableCNA
  • Now Platform VendorServiceNow Affected before Vancouver Patch 9 Hot Fix 2a; before Vancouver Patch 10; before Washington DC Patch 4 Hot Fix 1a; before Washington DC Patch 5; before Xanadu GA Release Fixed in Vancouver Patch 9 Hot Fix 2a, Vancouver Patch 10, Washington DC Patch 4 Hot Fix 1a, Washington DC Patch 5, Xanadu GA Release Patch available CNA

CPE configurations NVD · 69

CPEVersionsRoleVendor
cpe:2.3:a:servicenow:servicenow:xanadu:early_availability:*:*:*:*:*:*xanadu early_availabilityVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:xanadu:early_availability_hotfix_1:*:*:*:*:*:*xanadu early_availability_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:-:*:*:*:*:*:*washington_dcVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:early_availability:*:*:*:*:*:*washington_dc early_availabilityVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:early_availability_hotfix_1:*:*:*:*:*:*washington_dc early_availability_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1:*:*:*:*:*:*washington_dc patch_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_1:*:*:*:*:*:*washington_dc patch_1_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2:*:*:*:*:*:*washington_dc patch_1_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2a:*:*:*:*:*:*washington_dc patch_1_hotfix_2aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2b:*:*:*:*:*:*washington_dc patch_1_hotfix_2bVulnerableServiceNow
  • cpe:2.3:a:servicenow:servicenow:xanadu:early_availability:*:*:*:*:*:* Versions xanadu early_availability Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:xanadu:early_availability_hotfix_1:*:*:*:*:*:* Versions xanadu early_availability_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:-:*:*:*:*:*:* Versions washington_dc Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:early_availability:*:*:*:*:*:* Versions washington_dc early_availability Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:early_availability_hotfix_1:*:*:*:*:*:* Versions washington_dc early_availability_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1:*:*:*:*:*:* Versions washington_dc patch_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_1:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2a:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_2a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2b:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_2b Vulnerable ·ServiceNow
Show 59 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_3b:*:*:*:*:*:*washington_dc patch_1_hotfix_3bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2:*:*:*:*:*:*washington_dc patch_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2_hotfix_1:*:*:*:*:*:*washington_dc patch_2_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2_hotfix_2:*:*:*:*:*:*washington_dc patch_2_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3:*:*:*:*:*:*washington_dc patch_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_1:*:*:*:*:*:*washington_dc patch_3_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_2:*:*:*:*:*:*washington_dc patch_3_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_3:*:*:*:*:*:*washington_dc patch_3_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4:*:*:*:*:*:*washington_dc patch_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_1:*:*:*:*:*:*washington_dc patch_4_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:-:*:*:*:*:*:*vancouverVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:early_availability:*:*:*:*:*:*vancouver early_availabilityVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:early_availability_hotfix_1:*:*:*:*:*:*vancouver early_availability_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:early_availability_hotfix_2:*:*:*:*:*:*vancouver early_availability_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_1:*:*:*:*:*:*vancouver patch_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_1_hotfix_1:*:*:*:*:*:*vancouver patch_1_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2:*:*:*:*:*:*vancouver patch_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_1:*:*:*:*:*:*vancouver patch_2_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_1a:*:*:*:*:*:*vancouver patch_2_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_2:*:*:*:*:*:*vancouver patch_2_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_3:*:*:*:*:*:*vancouver patch_2_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix1a:*:*:*:*:*:*vancouver patch_2_hotfix1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3:*:*:*:*:*:*vancouver patch_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_1:*:*:*:*:*:*vancouver patch_3_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_2:*:*:*:*:*:*vancouver patch_3_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_3:*:*:*:*:*:*vancouver patch_3_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_4:*:*:*:*:*:*vancouver patch_3_hotfix_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4:*:*:*:*:*:*vancouver patch_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1:*:*:*:*:*:*vancouver patch_4_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1a:*:*:*:*:*:*vancouver patch_4_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1b:*:*:*:*:*:*vancouver patch_4_hotfix_1bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_2b:*:*:*:*:*:*vancouver patch_4_hotfix_2bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_5:*:*:*:*:*:*vancouver patch_5VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_5_hotfix_1:*:*:*:*:*:*vancouver patch_5_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_6:*:*:*:*:*:*vancouver patch_6VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_6_hotfix_1:*:*:*:*:*:*vancouver patch_6_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_6_hotfix_2:*:*:*:*:*:*vancouver patch_6_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7:*:*:*:*:*:*vancouver patch_7VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_1:*:*:*:*:*:*vancouver patch_7_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_1a:*:*:*:*:*:*vancouver patch_7_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2:*:*:*:*:*:*vancouver patch_7_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2a:*:*:*:*:*:*vancouver patch_7_hotfix_2aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2b:*:*:*:*:*:*vancouver patch_7_hotfix_2bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_3a:*:*:*:*:*:*vancouver patch_7_hotfix_3aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_3b:*:*:*:*:*:*vancouver patch_7_hotfix_3bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_4:*:*:*:*:*:*vancouver patch_7_hotfix_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_1a:*:*:*:*:*:*vancouver patch_7_hotifix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_1b:*:*:*:*:*:*vancouver patch_7_hotifix_1bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_2a:*:*:*:*:*:*vancouver patch_7_hotifix_2aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_2b:*:*:*:*:*:*vancouver patch_7_hotifix_2bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8:*:*:*:*:*:*vancouver patch_8VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_1:*:*:*:*:*:*vancouver patch_8_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_2:*:*:*:*:*:*vancouver patch_8_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_3:*:*:*:*:*:*vancouver patch_8_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_4:*:*:*:*:*:*vancouver patch_8_hotfix_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_5:*:*:*:*:*:*vancouver patch_8_hotfix_5VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_9:*:*:*:*:*:*vancouver patch_9VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_1:*:*:*:*:*:*vancouver patch_9_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_2:*:*:*:*:*:*vancouver patch_9_hotfix_2VulnerableServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_3b:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_3b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2:*:*:*:*:*:* Versions washington_dc patch_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2_hotfix_1:*:*:*:*:*:* Versions washington_dc patch_2_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2_hotfix_2:*:*:*:*:*:* Versions washington_dc patch_2_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3:*:*:*:*:*:* Versions washington_dc patch_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_1:*:*:*:*:*:* Versions washington_dc patch_3_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_2:*:*:*:*:*:* Versions washington_dc patch_3_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_3:*:*:*:*:*:* Versions washington_dc patch_3_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4:*:*:*:*:*:* Versions washington_dc patch_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_1:*:*:*:*:*:* Versions washington_dc patch_4_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:-:*:*:*:*:*:* Versions vancouver Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:early_availability:*:*:*:*:*:* Versions vancouver early_availability Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:early_availability_hotfix_1:*:*:*:*:*:* Versions vancouver early_availability_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:early_availability_hotfix_2:*:*:*:*:*:* Versions vancouver early_availability_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_1:*:*:*:*:*:* Versions vancouver patch_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_1_hotfix_1:*:*:*:*:*:* Versions vancouver patch_1_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2:*:*:*:*:*:* Versions vancouver patch_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_1:*:*:*:*:*:* Versions vancouver patch_2_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_1a:*:*:*:*:*:* Versions vancouver patch_2_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_2:*:*:*:*:*:* Versions vancouver patch_2_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_3:*:*:*:*:*:* Versions vancouver patch_2_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix1a:*:*:*:*:*:* Versions vancouver patch_2_hotfix1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3:*:*:*:*:*:* Versions vancouver patch_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_1:*:*:*:*:*:* Versions vancouver patch_3_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_2:*:*:*:*:*:* Versions vancouver patch_3_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_3:*:*:*:*:*:* Versions vancouver patch_3_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_4:*:*:*:*:*:* Versions vancouver patch_3_hotfix_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4:*:*:*:*:*:* Versions vancouver patch_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1:*:*:*:*:*:* Versions vancouver patch_4_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1a:*:*:*:*:*:* Versions vancouver patch_4_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1b:*:*:*:*:*:* Versions vancouver patch_4_hotfix_1b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_2b:*:*:*:*:*:* Versions vancouver patch_4_hotfix_2b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_5:*:*:*:*:*:* Versions vancouver patch_5 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_5_hotfix_1:*:*:*:*:*:* Versions vancouver patch_5_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_6:*:*:*:*:*:* Versions vancouver patch_6 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_6_hotfix_1:*:*:*:*:*:* Versions vancouver patch_6_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_6_hotfix_2:*:*:*:*:*:* Versions vancouver patch_6_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7:*:*:*:*:*:* Versions vancouver patch_7 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_1:*:*:*:*:*:* Versions vancouver patch_7_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_1a:*:*:*:*:*:* Versions vancouver patch_7_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2:*:*:*:*:*:* Versions vancouver patch_7_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2a:*:*:*:*:*:* Versions vancouver patch_7_hotfix_2a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2b:*:*:*:*:*:* Versions vancouver patch_7_hotfix_2b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_3a:*:*:*:*:*:* Versions vancouver patch_7_hotfix_3a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_3b:*:*:*:*:*:* Versions vancouver patch_7_hotfix_3b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_4:*:*:*:*:*:* Versions vancouver patch_7_hotfix_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_1a:*:*:*:*:*:* Versions vancouver patch_7_hotifix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_1b:*:*:*:*:*:* Versions vancouver patch_7_hotifix_1b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_2a:*:*:*:*:*:* Versions vancouver patch_7_hotifix_2a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_2b:*:*:*:*:*:* Versions vancouver patch_7_hotifix_2b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8:*:*:*:*:*:* Versions vancouver patch_8 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_1:*:*:*:*:*:* Versions vancouver patch_8_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_2:*:*:*:*:*:* Versions vancouver patch_8_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_3:*:*:*:*:*:* Versions vancouver patch_8_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_4:*:*:*:*:*:* Versions vancouver patch_8_hotfix_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_5:*:*:*:*:*:* Versions vancouver patch_8_hotfix_5 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_9:*:*:*:*:*:* Versions vancouver patch_9 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_1:*:*:*:*:*:* Versions vancouver patch_9_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_2:*:*:*:*:*:* Versions vancouver patch_9_hotfix_2 Vulnerable ·ServiceNow

Remediation

  • Fix · CNA Now Platform (ServiceNow) Fixed in Vancouver Patch 9 Hot Fix 2a, Vancouver Patch 10, Washington DC Patch 4 Hot Fix 1a, Washington DC Patch 5, Xanadu GA Release

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-8923
  2. 2026-10-03 Alias added: GHSA-qpr4-w3rc-m373

References

Advisory 1

  • TI-2024-04841 Incomplete Input Validation in GlideExpression Script KEVCVSS 4.0CRITICAL 9.2
  • TI-2024-04536 Jelly Template Injection Vulnerability in ServiceNow UI Macros KEVCVSS 4.0CRITICAL 9.3
  • TI-2022-21442 ACL bypass in Reporting functionality CVSS 3.1CRITICAL 9.9
  • TI-2024-08287 Unauthenticated Blind SQL Injection in Core Platform CVSS 4.0HIGH 8.7
  • TI-2018-05591 report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote… CVSS 3.0HIGH 8.8
  • TI-2021-20911 The password-reset form in ServiceNow Orlando provides different responses to invalid… CVSS 3.1MEDIUM 5.3
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences