TI-2025-00272 Aliases CVE-2025-0337 GHSA-4x8m-chwm-9h7p

Authorization bypass in Now Platform

LOW 31CWE-639Published 2025-03-06 · Updated 2025-03-06

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-639.

Summary

ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise would not be entitled to access. This issue is addressed in the listed patches and family release, which have been made available to hosted and self-hosted customers, as well as partners.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00386 32nd percentileScored 2026-11-07

Fix Fixed Now Platform (ServiceNow): Washington DC Patch 9, Xanadu Patch 4, Yokohama

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
ServiceNow	Now Platform	before Washington DC Patch 9; before Xanadu Patch 4; before Yokohama	Washington DC Patch 9, Xanadu Patch 4, Yokohama	Patch available	CNA

Now Platform VendorServiceNow Affected before Washington DC Patch 9; before Xanadu Patch 4; before Yokohama Fixed in Washington DC Patch 9, Xanadu Patch 4, Yokohama Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:servicenow:servicenow::::::::	—	—	ServiceNow

cpe:2.3:a:servicenow:servicenow:*:*:*:*:*:*:*:* Versions — — ·ServiceNow

Remediation

Fix · CNA Now Platform (ServiceNow) Fixed in Washington DC Patch 9, Xanadu Patch 4, Yokohama

Timeline

2026-10-02 Threatist record created from CVE-2025-0337
2026-10-03 Alias added: GHSA-4x8m-chwm-9h7p

References

Other 1

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1948695

TI-2024-04841 Incomplete Input Validation in GlideExpression Script KEVCVSS 4.0CRITICAL 9.2
TI-2024-04536 Jelly Template Injection Vulnerability in ServiceNow UI Macros KEVCVSS 4.0CRITICAL 9.3
TI-2025-11396 Unauthenticated Privilege Escalation in ServiceNow AI Platform CVSS 4.0CRITICAL 9.3
TI-2026-15447 Unauthenticated Remote Code Execution in GraphQL Composite Data API CVSS 4.0CRITICAL 10.0
TI-2026-52569 Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause CVSS 4.0CRITICAL 10.0
TI-2026-15448 Unauthenticated Privilege Escalation via System Configuration Image Upload Processor CVSS 4.0CRITICAL 10.0

See all 40 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences