# cve.now: ServiceNow

The newest entries naming ServiceNow as an affected vendor (up to 200), of 34 in all, 2 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-103093](https://cve.now/CVE-2026-103093.md): Sandbox Escape via Table Rotation in ServiceNow AI Platform (CVSS 9.4)
- [CVE-2026-6877](https://cve.now/CVE-2026-6877.md): Domain Separation Bypass in ServiceNow AI Platform (CVSS 5.3)
- [CVE-2026-103094](https://cve.now/CVE-2026-103094.md): Cleartext Storage of OAuth Credentials in ServiceNow AI Platform (CVSS 7.1)
- [CVE-2026-86860](https://cve.now/CVE-2026-86860.md): Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform (CVSS 9.3)
- [CVE-2026-86859](https://cve.now/CVE-2026-86859.md): Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform (CVSS 8.7)
- [CVE-2026-13016](https://cve.now/CVE-2026-13016.md): Unauthenticated SQL Injection in ServiceNow AI Platform (CVSS 9.3)
- [CVE-2026-86858](https://cve.now/CVE-2026-86858.md): Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform (CVSS 8.7)
- [CVE-2026-86857](https://cve.now/CVE-2026-86857.md): Authorization Bypass in ServiceNow AI Platform (CVSS 8.4)
- [CVE-2026-74820](https://cve.now/CVE-2026-74820.md): Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause (CVSS 10.0)
- [CVE-2026-18886](https://cve.now/CVE-2026-18886.md): Unauthenticated Privilege Escalation via System Configuration Image Upload Processor (CVSS 10.0)
- [CVE-2026-18885](https://cve.now/CVE-2026-18885.md): Unauthenticated Remote Code Execution in GraphQL Composite Data API (CVSS 10.0)
- [CVE-2026-6876](https://cve.now/CVE-2026-6876.md): Sandbox Escape in ServiceNow AI Platform (CVSS 10.0)
- [CVE-2026-6875](https://cve.now/CVE-2026-6875.md): Sandbox Escape in ServiceNow AI Platform (CVSS 9.5)
- [CVE-2026-0542](https://cve.now/CVE-2026-0542.md): Remote Code Execution in ServiceNow AI Platform (CVSS 9.2)
- [CVE-2025-12420](https://cve.now/CVE-2025-12420.md): Unauthenticated Privilege Escalation in ServiceNow AI Platform (CVSS 9.3)
- [CVE-2025-11449](https://cve.now/CVE-2025-11449.md): Reflected Cross Site Scripting in ServiceNow AI Platform (CVSS 5.3)
- [CVE-2025-11450](https://cve.now/CVE-2025-11450.md): Reflected Cross Site Scripting in ServiceNow AI Platform (CVSS 5.3)
- [CVE-2025-3089](https://cve.now/CVE-2025-3089.md): Broken Access Control in ServiceNow AI Platform (CVSS 5.3)
- [CVE-2025-3648](https://cve.now/CVE-2025-3648.md): Data Inference in Now Platform via Conditional ACLs (CVSS 8.2)
- [CVE-2025-0337](https://cve.now/CVE-2025-0337.md): Authorization bypass in Now Platform (CVSS 7.1)
- [CVE-2024-5890](https://cve.now/CVE-2024-5890.md): HTML Injection in the Assessment plugin (CVSS 5.1)
- [CVE-2024-8924](https://cve.now/CVE-2024-8924.md): Unauthenticated Blind SQL Injection in Core Platform (CVSS 8.7)
- [CVE-2024-8923](https://cve.now/CVE-2024-8923.md): Sandbox Escape in Now Platform (CVSS 9.3)
- [CVE-2024-5217](https://cve.now/CVE-2024-5217.md): Incomplete Input Validation in GlideExpression Script (CVSS 9.2, KEV)
- [CVE-2024-5178](https://cve.now/CVE-2024-5178.md): Incomplete Input Validation in SecurelyAccess API (CVSS 6.9)
- [CVE-2024-4879](https://cve.now/CVE-2024-4879.md): Jelly Template Injection Vulnerability in ServiceNow UI Macros (CVSS 9.3, KEV)
- [CVE-2023-3442](https://cve.now/CVE-2023-3442.md): Missing Authorization in Jenkins plug-in for ServiceNow DevOps (CVSS 7.7)
- [CVE-2023-3414](https://cve.now/CVE-2023-3414.md): Cross-Site Request Forgery (CSRF) in Jenkins Plug-in for ServiceNow DevOps (CVSS 6.1)
- [CVE-2023-1298](https://cve.now/CVE-2023-1298.md): ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the Se (CVSS 4.3)
- [CVE-2022-43684](https://cve.now/CVE-2022-43684.md): ACL bypass in Reporting functionality (CVSS 9.9)
- [CVE-2023-1209](https://cve.now/CVE-2023-1209.md): Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts. (CVSS 4.3)
- [CVE-2022-46389](https://cve.now/CVE-2022-46389.md): Cross-Site Scripting (XSS) vulnerability found on logout functionality (CVSS 6.1)
- [CVE-2022-46886](https://cve.now/CVE-2022-46886.md): There exists an open redirect within the response list update functionality of ServiceNow. (CVSS 5.5)
- [CVE-2022-39048](https://cve.now/CVE-2022-39048.md): Cross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment\_redirect (CVSS 6.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/servicenow
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.