ServiceNow · Utah, Vancouver, and Washington DC Now Platform
Date added (CISA)
2024-07-29
Remediation due
2024-08-19
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.