ServiceNow vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2026-103093 New	SA ServiceNow AI Platform ServiceNow	9.4	–	Oct 29	Sandbox Escape via Table Rotation in ServiceNow AI Platform
CVE-2026-6877 New	SA ServiceNow AI Platform ServiceNow	5.3	–	Oct 29	Domain Separation Bypass in ServiceNow AI Platform
CVE-2026-103094 New	SA ServiceNow AI Platform ServiceNow	7.1	–	Oct 29	Cleartext Storage of OAuth Credentials in ServiceNow AI Platform
CVE-2026-86860	SA ServiceNow AI Platform ServiceNow	9.3	0%	Sep 24	Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform
CVE-2026-86859	SA ServiceNow AI Platform ServiceNow	8.7	0%	Sep 24	Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform
CVE-2026-13016	SA ServiceNow AI Platform ServiceNow	9.3	0%	Sep 24	Unauthenticated SQL Injection in ServiceNow AI Platform
CVE-2026-86858	SA ServiceNow AI Platform ServiceNow	8.7	0%	Sep 24	Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform
CVE-2026-86857	SA ServiceNow AI Platform ServiceNow	8.4	0%	Sep 24	Authorization Bypass in ServiceNow AI Platform
CVE-2026-74820	SA ServiceNow AI Platform ServiceNow	10.0	5%	Aug 27	Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause
CVE-2026-18886	SA ServiceNow AI Platform ServiceNow	10.0	5%	Aug 27	Unauthenticated Privilege Escalation via System Configuration Image Upload Processor
CVE-2026-18885	SA ServiceNow AI Platform ServiceNow	10.0	7%	Aug 27	Unauthenticated Remote Code Execution in GraphQL Composite Data API
CVE-2026-6876	SA ServiceNow AI Platform ServiceNow	10.0	1%	Aug 27	Sandbox Escape in ServiceNow AI Platform
CVE-2026-6875	SA ServiceNow AI Platform ServiceNow	9.5	1%	Jul 13	Sandbox Escape in ServiceNow AI Platform
CVE-2026-0542	SA ServiceNow AI Platform ServiceNow	9.2	1%	Feb 25	Remote Code Execution in ServiceNow AI Platform
CVE-2025-12420	NA Now Assist AI Agents ServiceNow	9.8	53%	Jan 12	Unauthenticated Privilege Escalation in ServiceNow AI Platform
CVE-2025-11449	SA ServiceNow AI Platform ServiceNow	5.3	0%	Oct 10	Reflected Cross Site Scripting in ServiceNow AI Platform
CVE-2025-11450	SA ServiceNow AI Platform ServiceNow	5.3	0%	Oct 10	Reflected Cross Site Scripting in ServiceNow AI Platform
CVE-2025-3089	SA ServiceNow AI Platform ServiceNow	5.3	0%	Aug 12	Broken Access Control in ServiceNow AI Platform
CVE-2025-3648	NP Now Platform ServiceNow	8.2	2%	Jul 8	Data Inference in Now Platform via Conditional ACLs
CVE-2025-0337	NP Now Platform ServiceNow	6.5	0%	Mar 6	Authorization bypass in Now Platform
CVE-2024-5890	NP Now Platform ServiceNow	4.3	0%	Dec 2	HTML Injection in the Assessment plugin
CVE-2024-8924	NP Now Platform ServiceNow	7.5	0%	Oct 29	Unauthenticated Blind SQL Injection in Core Platform
CVE-2024-8923	NP Now Platform ServiceNow	10.0	1%	Oct 29	Sandbox Escape in Now Platform
CVE-2024-5217 In wildKEV	NP Now Platform ServiceNow	9.8	100%	Jul 10	Incomplete Input Validation in GlideExpression Script
CVE-2024-5178	NP Now Platform ServiceNow	4.9	34%	Jul 10	Incomplete Input Validation in SecurelyAccess API
CVE-2024-4879 In wildKEV	NP Now Platform ServiceNow	9.8	100%	Jul 10	Jelly Template Injection Vulnerability in ServiceNow UI Macros
CVE-2023-3442	JP Jenkins plug-in for ServiceNow DevOps ServiceNow	7.5	1%	Jul 26	Missing Authorization in Jenkins plug-in for ServiceNow DevOps
CVE-2023-3414	JP Jenkins plug-in for ServiceNow DevOps ServiceNow	6.5	0%	Jul 26	Cross-Site Request Forgery (CSRF) in Jenkins Plug-in for ServiceNow DevOps
CVE-2023-1298	NU Now User Experience ServiceNow	6.1	0%	Jul 6	ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout
CVE-2022-43684	NP Now Platform ServiceNow	6.5	2%	Jun 13	ACL bypass in Reporting functionality
CVE-2023-1209	SR ServiceNow Records ServiceNow	5.4	0%	May 23	Cross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts
CVE-2022-46389	NP Now Platform ServiceNow	6.1	1%	Apr 17	Cross-Site Scripting (XSS) vulnerability found on logout functionality
CVE-2022-46886	SE ServiceNow ServiceNow	6.1	0%	Apr 14	There exists an open redirect within the response list update functionality of ServiceNow
CVE-2022-39048	NP Now Platform Servicenow	6.1	1%	Apr 10	Cross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment_redirect
CVE-2022-42704	SE Servicenow Servicenow	5.4	0%	Jan 12	A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec, Rome, and San Diego allows remote attackers to inject…
CVE-2022-38463	SE Servicenow Servicenow	6.1	3%	Aug 23	ServiceNow through San Diego Patch 4b and Patch 6 allows reflected XSS in the logout functionality
CVE-2022-38172	SE Servicenow Servicenow	6.1	1%	Aug 23	ServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new dashboard for the Performance Analytics dashboard
CVE-2021-45901	SE Servicenow Servicenow	5.3	14%	Feb 10	The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists
CVE-2019-20768	IS IT Service Management Servicenow	5.4	1%	May 5	ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id…
CVE-2018-7748	SE Servicenow Servicenow	8.8	3%	Aug 3	report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media…
CVE-2018-8720	IS IT Service Management Servicenow	5.4	1%	Mar 15	ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search bar of My Portal (aka search_results.do)