CVE Browser

Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform

Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform

Unauthenticated SQL Injection in ServiceNow AI Platform

Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform

Authorization Bypass in ServiceNow AI Platform

Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause

Unauthenticated Privilege Escalation via System Configuration Image Upload Processor

Unauthenticated Remote Code Execution in GraphQL Composite Data API

Sandbox Escape in ServiceNow AI Platform

Sandbox Escape in ServiceNow AI Platform

Remote Code Execution in ServiceNow AI Platform

Unauthenticated Privilege Escalation in ServiceNow AI Platform

Reflected Cross Site Scripting in ServiceNow AI Platform

Reflected Cross Site Scripting in ServiceNow AI Platform

Broken Access Control in ServiceNow AI Platform

Data Inference in Now Platform via Conditional ACLs

Authorization bypass in Now Platform

HTML Injection in the Assessment plugin

Unauthenticated Blind SQL Injection in Core Platform

Sandbox Escape in Now Platform

Incomplete Input Validation in GlideExpression Script

Incomplete Input Validation in SecurelyAccess API

Jelly Template Injection Vulnerability in ServiceNow UI Macros

Missing Authorization in Jenkins plug-in for ServiceNow DevOps

Cross-Site Request Forgery (CSRF) in Jenkins Plug-in for ServiceNow DevOps