CVE-2024-4879 ServiceNow Utah, Vancouver, And Washington DC Now Platform
ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.
- CVSS
- not scored
On CISA’s exploited list
ServiceNow Improper Input Validation Vulnerability
- Added
- 2024-07-29
- Federal patch deadline
- 2024-08-19
- Ransomware use
- not known