Read the docs
TI-2024-08287 Aliases CVE-2024-8924GHSA-25m4-rhwx-m523

Unauthenticated Blind SQL Injection in Core Platform

Priority MEDIUM 44CWE-89Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
SQL injection
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00498 42nd percentileScored 2026-11-07
Fix Fixed Now Platform (ServiceNow): Utah Patch 10b Hot Fix 3, Vancouver Patch 8 Hot Fix 5, Vancouver Patch 9 Hot Fix 3b +6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ServiceNowNow Platformbefore Utah Patch 10b Hot Fix 3; before Vancouver Patch 8 Hot Fix 5; before Vancouver Patch 9 Hot Fix 3b; before Vancouver Patch 10 Hot Fix 2; before Washington DC Patch 4 Hot Fix 2b; before Washington DC Patch 5 Hot Fix 6; before Washington DC Patch 6 Hot Fix 1; before Washington DC Patch 7; before Xanadu Patch 1Utah Patch 10b Hot Fix 3, Vancouver Patch 8 Hot Fix 5, Vancouver Patch 9 Hot Fix 3b, Vancouver Patch 10 Hot Fix 2, Washington DC Patch 4 Hot Fix 2b, Washington DC Patch 5 Hot Fix 6, Washington DC Patch 6 Hot Fix 1, Washington DC Patch 7, Xanadu Patch 1Patch availableCNA
  • Now Platform VendorServiceNow Affected before Utah Patch 10b Hot Fix 3; before Vancouver Patch 8 Hot Fix 5; before Vancouver Patch 9 Hot Fix 3b; before Vancouver Patch 10 Hot Fix 2; before Washington DC Patch 4 Hot Fix 2b; before Washington DC Patch 5 Hot Fix 6; before Washington DC Patch 6 Hot Fix 1; before Washington DC Patch 7; before Xanadu Patch 1 Fixed in Utah Patch 10b Hot Fix 3, Vancouver Patch 8 Hot Fix 5, Vancouver Patch 9 Hot Fix 3b, Vancouver Patch 10 Hot Fix 2, Washington DC Patch 4 Hot Fix 2b, Washington DC Patch 5 Hot Fix 6, Washington DC Patch 6 Hot Fix 1, Washington DC Patch 7, Xanadu Patch 1 Patch available CNA

CPE configurations NVD · 87

CPEVersionsRoleVendor
cpe:2.3:a:servicenow:servicenow:xanadu:-:*:*:*:*:*:*xanaduVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:xanadu:early_availability:*:*:*:*:*:*xanadu early_availabilityVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:xanadu:early_availability_hotfix_1:*:*:*:*:*:*xanadu early_availability_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:-:*:*:*:*:*:*vancouverVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:early_availability:*:*:*:*:*:*vancouver early_availabilityVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:early_availability_hotfix_1:*:*:*:*:*:*vancouver early_availability_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:early_availability_hotfix_2:*:*:*:*:*:*vancouver early_availability_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_1:*:*:*:*:*:*vancouver patch_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_1_hotfix_1:*:*:*:*:*:*vancouver patch_1_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_10:*:*:*:*:*:*vancouver patch_10VulnerableServiceNow
  • cpe:2.3:a:servicenow:servicenow:xanadu:-:*:*:*:*:*:* Versions xanadu Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:xanadu:early_availability:*:*:*:*:*:* Versions xanadu early_availability Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:xanadu:early_availability_hotfix_1:*:*:*:*:*:* Versions xanadu early_availability_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:-:*:*:*:*:*:* Versions vancouver Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:early_availability:*:*:*:*:*:* Versions vancouver early_availability Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:early_availability_hotfix_1:*:*:*:*:*:* Versions vancouver early_availability_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:early_availability_hotfix_2:*:*:*:*:*:* Versions vancouver early_availability_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_1:*:*:*:*:*:* Versions vancouver patch_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_1_hotfix_1:*:*:*:*:*:* Versions vancouver patch_1_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_10:*:*:*:*:*:* Versions vancouver patch_10 Vulnerable ·ServiceNow
Show 77 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:servicenow:servicenow:vancouver:patch_10_hotfix_1:*:*:*:*:*:*vancouver patch_10_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2:*:*:*:*:*:*vancouver patch_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_1:*:*:*:*:*:*vancouver patch_2_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_1a:*:*:*:*:*:*vancouver patch_2_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_2:*:*:*:*:*:*vancouver patch_2_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_3:*:*:*:*:*:*vancouver patch_2_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix1a:*:*:*:*:*:*vancouver patch_2_hotfix1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3:*:*:*:*:*:*vancouver patch_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_1:*:*:*:*:*:*vancouver patch_3_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_2:*:*:*:*:*:*vancouver patch_3_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_3:*:*:*:*:*:*vancouver patch_3_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_4:*:*:*:*:*:*vancouver patch_3_hotfix_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4:*:*:*:*:*:*vancouver patch_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1:*:*:*:*:*:*vancouver patch_4_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1a:*:*:*:*:*:*vancouver patch_4_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1b:*:*:*:*:*:*vancouver patch_4_hotfix_1bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_2b:*:*:*:*:*:*vancouver patch_4_hotfix_2bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_5:*:*:*:*:*:*vancouver patch_5VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_5_hotfix_1:*:*:*:*:*:*vancouver patch_5_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_6:*:*:*:*:*:*vancouver patch_6VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_6_hotfix_1:*:*:*:*:*:*vancouver patch_6_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_6_hotfix_2:*:*:*:*:*:*vancouver patch_6_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7:*:*:*:*:*:*vancouver patch_7VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_1:*:*:*:*:*:*vancouver patch_7_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_1a:*:*:*:*:*:*vancouver patch_7_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2:*:*:*:*:*:*vancouver patch_7_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2a:*:*:*:*:*:*vancouver patch_7_hotfix_2aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2b:*:*:*:*:*:*vancouver patch_7_hotfix_2bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_3a:*:*:*:*:*:*vancouver patch_7_hotfix_3aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_3b:*:*:*:*:*:*vancouver patch_7_hotfix_3bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_4:*:*:*:*:*:*vancouver patch_7_hotfix_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_1a:*:*:*:*:*:*vancouver patch_7_hotifix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_1b:*:*:*:*:*:*vancouver patch_7_hotifix_1bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_2a:*:*:*:*:*:*vancouver patch_7_hotifix_2aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_2b:*:*:*:*:*:*vancouver patch_7_hotifix_2bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8:*:*:*:*:*:*vancouver patch_8VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_1:*:*:*:*:*:*vancouver patch_8_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_2:*:*:*:*:*:*vancouver patch_8_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_3:*:*:*:*:*:*vancouver patch_8_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_4:*:*:*:*:*:*vancouver patch_8_hotfix_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_5:*:*:*:*:*:*vancouver patch_8_hotfix_5VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_9:*:*:*:*:*:*vancouver patch_9VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_1:*:*:*:*:*:*vancouver patch_9_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_2:*:*:*:*:*:*vancouver patch_9_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_2a:*:*:*:*:*:*vancouver patch_9_hotfix_2aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_2b:*:*:*:*:*:*vancouver patch_9_hotfix_2bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_3a:*:*:*:*:*:*vancouver patch_9_hotfix_3aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:-:*:*:*:*:*:*washington_dcVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:early_availability:*:*:*:*:*:*washington_dc early_availabilityVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:early_availability_hotfix_1:*:*:*:*:*:*washington_dc early_availability_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1:*:*:*:*:*:*washington_dc patch_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_1:*:*:*:*:*:*washington_dc patch_1_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2:*:*:*:*:*:*washington_dc patch_1_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2a:*:*:*:*:*:*washington_dc patch_1_hotfix_2aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2b:*:*:*:*:*:*washington_dc patch_1_hotfix_2bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_3b:*:*:*:*:*:*washington_dc patch_1_hotfix_3bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2:*:*:*:*:*:*washington_dc patch_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2_hotfix_1:*:*:*:*:*:*washington_dc patch_2_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2_hotfix_2:*:*:*:*:*:*washington_dc patch_2_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3:*:*:*:*:*:*washington_dc patch_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_1:*:*:*:*:*:*washington_dc patch_3_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_2:*:*:*:*:*:*washington_dc patch_3_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_3:*:*:*:*:*:*washington_dc patch_3_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4:*:*:*:*:*:*washington_dc patch_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_1:*:*:*:*:*:*washington_dc patch_4_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_1a:*:*:*:*:*:*washington_dc patch_4_hotfix_1aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_1b:*:*:*:*:*:*washington_dc patch_4_hotfix_1bVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_2:*:*:*:*:*:*washington_dc patch_4_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_2a:*:*:*:*:*:*washington_dc patch_4_hotfix_2aVulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5:*:*:*:*:*:*washington_dc patch_5VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_1:*:*:*:*:*:*washington_dc patch_5_hotfix_1VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_2:*:*:*:*:*:*washington_dc patch_5_hotfix_2VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_3:*:*:*:*:*:*washington_dc patch_5_hotfix_3VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_4:*:*:*:*:*:*washington_dc patch_5_hotfix_4VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_5:*:*:*:*:*:*washington_dc patch_5_hotfix_5VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_6:*:*:*:*:*:*washington_dc patch_5_hotfix_6VulnerableServiceNow
cpe:2.3:a:servicenow:servicenow:washington_dc:patch_6:*:*:*:*:*:*washington_dc patch_6VulnerableServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_10_hotfix_1:*:*:*:*:*:* Versions vancouver patch_10_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2:*:*:*:*:*:* Versions vancouver patch_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_1:*:*:*:*:*:* Versions vancouver patch_2_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_1a:*:*:*:*:*:* Versions vancouver patch_2_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_2:*:*:*:*:*:* Versions vancouver patch_2_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix_3:*:*:*:*:*:* Versions vancouver patch_2_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_2_hotfix1a:*:*:*:*:*:* Versions vancouver patch_2_hotfix1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3:*:*:*:*:*:* Versions vancouver patch_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_1:*:*:*:*:*:* Versions vancouver patch_3_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_2:*:*:*:*:*:* Versions vancouver patch_3_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_3:*:*:*:*:*:* Versions vancouver patch_3_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_3_hotfix_4:*:*:*:*:*:* Versions vancouver patch_3_hotfix_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4:*:*:*:*:*:* Versions vancouver patch_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1:*:*:*:*:*:* Versions vancouver patch_4_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1a:*:*:*:*:*:* Versions vancouver patch_4_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_1b:*:*:*:*:*:* Versions vancouver patch_4_hotfix_1b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_4_hotfix_2b:*:*:*:*:*:* Versions vancouver patch_4_hotfix_2b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_5:*:*:*:*:*:* Versions vancouver patch_5 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_5_hotfix_1:*:*:*:*:*:* Versions vancouver patch_5_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_6:*:*:*:*:*:* Versions vancouver patch_6 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_6_hotfix_1:*:*:*:*:*:* Versions vancouver patch_6_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_6_hotfix_2:*:*:*:*:*:* Versions vancouver patch_6_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7:*:*:*:*:*:* Versions vancouver patch_7 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_1:*:*:*:*:*:* Versions vancouver patch_7_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_1a:*:*:*:*:*:* Versions vancouver patch_7_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2:*:*:*:*:*:* Versions vancouver patch_7_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2a:*:*:*:*:*:* Versions vancouver patch_7_hotfix_2a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_2b:*:*:*:*:*:* Versions vancouver patch_7_hotfix_2b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_3a:*:*:*:*:*:* Versions vancouver patch_7_hotfix_3a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_3b:*:*:*:*:*:* Versions vancouver patch_7_hotfix_3b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotfix_4:*:*:*:*:*:* Versions vancouver patch_7_hotfix_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_1a:*:*:*:*:*:* Versions vancouver patch_7_hotifix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_1b:*:*:*:*:*:* Versions vancouver patch_7_hotifix_1b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_2a:*:*:*:*:*:* Versions vancouver patch_7_hotifix_2a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_7_hotifix_2b:*:*:*:*:*:* Versions vancouver patch_7_hotifix_2b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8:*:*:*:*:*:* Versions vancouver patch_8 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_1:*:*:*:*:*:* Versions vancouver patch_8_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_2:*:*:*:*:*:* Versions vancouver patch_8_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_3:*:*:*:*:*:* Versions vancouver patch_8_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_4:*:*:*:*:*:* Versions vancouver patch_8_hotfix_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_8_hotfix_5:*:*:*:*:*:* Versions vancouver patch_8_hotfix_5 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_9:*:*:*:*:*:* Versions vancouver patch_9 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_1:*:*:*:*:*:* Versions vancouver patch_9_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_2:*:*:*:*:*:* Versions vancouver patch_9_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_2a:*:*:*:*:*:* Versions vancouver patch_9_hotfix_2a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_2b:*:*:*:*:*:* Versions vancouver patch_9_hotfix_2b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:vancouver:patch_9_hotfix_3a:*:*:*:*:*:* Versions vancouver patch_9_hotfix_3a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:-:*:*:*:*:*:* Versions washington_dc Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:early_availability:*:*:*:*:*:* Versions washington_dc early_availability Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:early_availability_hotfix_1:*:*:*:*:*:* Versions washington_dc early_availability_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1:*:*:*:*:*:* Versions washington_dc patch_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_1:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2a:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_2a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_2b:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_2b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_1_hotfix_3b:*:*:*:*:*:* Versions washington_dc patch_1_hotfix_3b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2:*:*:*:*:*:* Versions washington_dc patch_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2_hotfix_1:*:*:*:*:*:* Versions washington_dc patch_2_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_2_hotfix_2:*:*:*:*:*:* Versions washington_dc patch_2_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3:*:*:*:*:*:* Versions washington_dc patch_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_1:*:*:*:*:*:* Versions washington_dc patch_3_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_2:*:*:*:*:*:* Versions washington_dc patch_3_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_3_hotfix_3:*:*:*:*:*:* Versions washington_dc patch_3_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4:*:*:*:*:*:* Versions washington_dc patch_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_1:*:*:*:*:*:* Versions washington_dc patch_4_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_1a:*:*:*:*:*:* Versions washington_dc patch_4_hotfix_1a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_1b:*:*:*:*:*:* Versions washington_dc patch_4_hotfix_1b Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_2:*:*:*:*:*:* Versions washington_dc patch_4_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_4_hotfix_2a:*:*:*:*:*:* Versions washington_dc patch_4_hotfix_2a Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5:*:*:*:*:*:* Versions washington_dc patch_5 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_1:*:*:*:*:*:* Versions washington_dc patch_5_hotfix_1 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_2:*:*:*:*:*:* Versions washington_dc patch_5_hotfix_2 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_3:*:*:*:*:*:* Versions washington_dc patch_5_hotfix_3 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_4:*:*:*:*:*:* Versions washington_dc patch_5_hotfix_4 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_5:*:*:*:*:*:* Versions washington_dc patch_5_hotfix_5 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_5_hotfix_6:*:*:*:*:*:* Versions washington_dc patch_5_hotfix_6 Vulnerable ·ServiceNow
  • cpe:2.3:a:servicenow:servicenow:washington_dc:patch_6:*:*:*:*:*:* Versions washington_dc patch_6 Vulnerable ·ServiceNow

Remediation

  • Fix · CNA Now Platform (ServiceNow) Fixed in Utah Patch 10b Hot Fix 3, Vancouver Patch 8 Hot Fix 5, Vancouver Patch 9 Hot Fix 3b, Vancouver Patch 10 Hot Fix 2, Washington DC Patch 4 Hot Fix 2b, Washington DC Patch 5 Hot Fix 6, Washington DC Patch 6 Hot Fix 1, Washington DC Patch 7, Xanadu Patch 1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-8924
  2. 2026-10-03 Alias added: GHSA-25m4-rhwx-m523

References

Advisory 1

  • TI-2024-04841 Incomplete Input Validation in GlideExpression Script KEVCVSS 4.0CRITICAL 9.2
  • TI-2024-04536 Jelly Template Injection Vulnerability in ServiceNow UI Macros KEVCVSS 4.0CRITICAL 9.3
  • TI-2024-08286 Sandbox Escape in Now Platform CVSS 4.0CRITICAL 9.3
  • TI-2022-21442 ACL bypass in Reporting functionality CVSS 3.1CRITICAL 9.9
  • TI-2018-05591 report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote… CVSS 3.0HIGH 8.8
  • TI-2021-20911 The password-reset form in ServiceNow Orlando provides different responses to invalid… CVSS 3.1MEDIUM 5.3
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences