Vulnerabilidades em ServiceNow
34 resultadosAnálise Vexday
ServiceNow apresenta 21 vulnerabilidades conhecidas em sua base, com 2 atualmente sob ataque ativo e 7 classificadas como críticas, indicando risco moderado a elevado. A fraqueza dominante é CWE-79 (cross-site scripting), pattern recorrente que sugere lacunas na validação de entrada. Com apenas 1 CVE publicada nos últimos 90 dias, o risco parece estabilizado, mas as 2 vulnerabilidades em exploração ativa demandam priorização imediata de patches.
CVE-2023-1298MEDIUMServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the SeEPSS 0.4%CVE-2025-0337HIGHAuthorization bypass in Now PlatformEPSS 0.4%CVE-2023-1209MEDIUMCross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated attacker to inject arbitrary scripts.EPSS 0.4%CVE-2025-11449MEDIUMReflected Cross Site Scripting in ServiceNow AI PlatformEPSS 0.4%CVE-2025-11450MEDIUMReflected Cross Site Scripting in ServiceNow AI PlatformEPSS 0.4%CVE-2026-6877MEDIUMDomain Separation Bypass in ServiceNow AI PlatformEPSS 0.3%CVE-2026-86860CRITICALUnauthenticated Sensitive Data Disclosure in ServiceNow AI PlatformEPSS 0.3%CVE-2024-5890MEDIUMHTML Injection in the Assessment pluginEPSS 0.3%CVE-2026-86859HIGHUnauthenticated Arbitrary Record Disclosure in ServiceNow AI PlatformEPSS 0.3%CVE-2022-46886MEDIUMThere exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redirect users to arbitrEPSS 0.3%CVE-2026-86858HIGHUnauthenticated Privilege Escalation via GraphQL in ServiceNow AI PlatformEPSS 0.3%CVE-2026-13016CRITICALUnauthenticated SQL Injection in ServiceNow AI PlatformEPSS 0.3%CVE-2026-103094HIGHCleartext Storage of OAuth Credentials in ServiceNow AI PlatformEPSS 0.3%CVE-2026-86857HIGHAuthorization Bypass in ServiceNow AI PlatformEPSS 0.3%