A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2024-4879

ServiceNow Improper Input Validation Vulnerability

Published
2024-07-29
Modified
2026-07-31
Sources
cisa-kev

Summary

ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.