ServiceNow vulnerabilities
34 CVEs and advisories name ServiceNow as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-103093Sandbox Escape via Table Rotation in ServiceNow AI Platform
- CVE-2026-6877Domain Separation Bypass in ServiceNow AI Platform
- CVE-2026-103094Cleartext Storage of OAuth Credentials in ServiceNow AI Platform
- CVE-2026-86860Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform
- CVE-2026-86859Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform
- CVE-2026-13016Unauthenticated SQL Injection in ServiceNow AI Platform
- CVE-2026-86858Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform
- CVE-2026-86857Authorization Bypass in ServiceNow AI Platform
- CVE-2026-74820Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause
- CVE-2026-18886Unauthenticated Privilege Escalation via System Configuration Image Upload Processor
- CVE-2026-18885Unauthenticated Remote Code Execution in GraphQL Composite Data API
- CVE-2026-6876Sandbox Escape in ServiceNow AI Platform
- CVE-2026-6875Sandbox Escape in ServiceNow AI Platform
- CVE-2026-0542Remote Code Execution in ServiceNow AI Platform
- CVE-2025-12420Unauthenticated Privilege Escalation in ServiceNow AI Platform
- CVE-2025-11449Reflected Cross Site Scripting in ServiceNow AI Platform
- CVE-2025-11450Reflected Cross Site Scripting in ServiceNow AI Platform
- CVE-2025-3089Broken Access Control in ServiceNow AI Platform
- CVE-2025-3648Data Inference in Now Platform via Conditional ACLs
- CVE-2025-0337Authorization bypass in Now Platform
- CVE-2024-5890HTML Injection in the Assessment plugin
- CVE-2024-8924Unauthenticated Blind SQL Injection in Core Platform
- CVE-2024-8923Sandbox Escape in Now Platform
- CVE-2024-5217Incomplete Input Validation in GlideExpression Script
- CVE-2024-5178Incomplete Input Validation in SecurelyAccess API
- CVE-2024-4879Jelly Template Injection Vulnerability in ServiceNow UI Macros
- CVE-2023-3442Missing Authorization in Jenkins plug-in for ServiceNow DevOps
- CVE-2023-3414Cross-Site Request Forgery (CSRF) in Jenkins Plug-in for ServiceNow DevOps
- CVE-2023-1298ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the Se
- CVE-2022-43684ACL bypass in Reporting functionality