As cited
Copy frozen at (site build).
vulnerabilities
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
ServiceNow released patches for four security flaws in the ServiceNow artificial intelligence (AI) Platform, with three rated 10.0 on the Common Vulnerability Scoring System (CVSS) scale. The vulnerabilities allow remote code execution and structured query language (SQL) injection attacks by unauthenticated attackers under certain conditions. The company deployed updates to hosted instances and provided patches to partners and self-hosted customers.
Why it matters: Organizations running self-hosted ServiceNow instances face immediate risk from these critical vulnerabilities and must apply patches urgently to prevent unauthorized code execution and data theft.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL
ServiceNow released patches for four security flaws in the ServiceNow artificial intelligence (AI) Platform, with three rated 10.0 on the Common Vulnerability Scoring System (CVSS) scale. The vulnerabilities allow remote code execution and structured query language (SQL) injection attacks by unauthenticated attackers under certain conditions. The company deployed updates to hosted instances and provided patches to partners and self-hosted customers.
Why it matters: Organizations running self-hosted ServiceNow instances face immediate risk from these critical vulnerabilities and must apply patches urgently to prevent unauthorized code execution and data theft.
- Source published
- First seen by Cybersecurity Tracker