Skip to content
OpenAdvisories

Product · ServiceNow

Now Platform

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2025-3648

    Data Inference in Now Platform via Conditional ACLs

    A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization. Under certain conditional access control list (ACL) configurations, this vulnerability could enable unauthenticated and authenticated users…

    ServiceNow Now Platform
  • High 7.5
    CVE-2024-8924

    Unauthenticated Blind SQL Injection in Core Platform

    ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNo…

    ServiceNow Now Platform