CVE Watch—

CVE-2024-4879

ServiceNow Improper Input Validation Vulnerability

CVSS

—

Sin CVSS

EPSS

100.0%

p100

KEV

SÍ

29 jul 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 días100.0%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

ServiceNow / Utah, Vancouver, and Washington DC Now Platform

Vulnerabilidad

ServiceNow Improper Input Validation Vulnerability

Añadido a KEV

29 jul 2024

Remediar antes de

19 ago 2024

Uso conocido en ransomware

Descripción resumida

ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154; https://nvd.nist.gov/vuln/detail/CVE-2024-4879

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2024-5217—

99.9%

KEV—80ServiceNow Incomplete List of Disallowed Inputs Vulnerability—