Vendor

ServiceNow

2 of 5 ServiceNow CVEs in Patchfirst (40%) are in of vulnerabilities exploited in the wild.

CVEs: 5
In CISA KEV: 240%
Known ransomware use: 0
Median days to KEV: 19; from publication
Latest KEV listing: 29 Jul 2024

Watch ServiceNow Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Utah, Vancouver, and Washington DC Now Platform In KEV: 2 CVEs: 2
ServiceNow AI Platform In KEV: 0 CVEs: 2
Now Platform In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with ServiceNow CVEs

TechniqueCVEs
T1059Command and Scripting Interpreter CVEs: 2
T1005Data from Local System CVEs: 2
T1190Exploit Public-Facing Application CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/servicenow.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are ServiceNow CVEs linked to the technique. Each link’s provenance is on the CVE page.

ServiceNow CVEs

5 CVEs, by priority

CVE-2026-6875Sandbox Escape in ServiceNow AI Platform
ServiceNow · ServiceNow AI PlatformPublic exploitCritical · 9.51 report
1.4%Top 27%
71.7priority
CVE-2024-4879ServiceNow Improper Input Validation Vulnerability
ServiceNow · Utah, Vancouver, and Washington DC Now PlatformKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter+1 more
>99.9%Top 0.02%
69.9priority
CVE-2024-5217ServiceNow Incomplete List of Disallowed Inputs Vulnerability
ServiceNow · Utah, Vancouver, and Washington DC Now PlatformKEVPublic exploitCritical · 9.8T1059Command and Scripting Interpreter T1005Data from Local System
99.6%Top 0.05%
69.8priority
CVE-2024-5178Incomplete Input Validation in SecurelyAccess API
ServiceNow · Now PlatformMedium · 4.9
33.6%Top 1.6%
59.9priority
CVE-2026-103093ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform
ServiceNow · ServiceNow AI PlatformCritical · 9.4
0.4%Top 63%
14.7priority