Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

ServiceNow

Products: Now Platform

81.1

Score

2

CVEs

2

Active

0

PoC

2

KEV

#32

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2024-4879	2024-07-10	9.3v4.0	ACTIVE		Low	None	YES	40.6	Now Platform	ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instanc
CVE-2024-5217	2024-07-10	9.2v4.0	ACTIVE		Low	None	YES	40.6	Now Platform	ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed i

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3