CVE-2024-5217

Name of the Vulnerable Software and Affected Versions ServiceNow versions prior to the June 2024 patching cycle

Description The issue is related to an input validation vulnerability that could enable an unauthenticated user to remotely execute code within the context of the Now Platform. This vulnerability was identified in the Washington DC, Vancouver, and earlier Now Platform releases.

Recommendations Apply security patches relevant to your instance as soon as possible, specifically those released during the June 2024 patching cycle.