CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-07-10
ServiceNow Now Platform Input Validation Vulnerability Leading to Remote Code Execution (CVE-2024-4879) Security Advisory
[Affected Scope] ServiceNow Now Platform Vancouver and Washington DC releases
[Impact] Unauthenticated remote attackers can execute arbitrary code within the context of the Now Platform, potentially leading to full system compromise
[Mitigation] Apply official security patches and hotfixes immediately, and restrict external access for self-hosted instances while monitoring for IoCs