CVE-2025-0337

Name of the Vulnerable Software and Affected Versions ServiceNow versions prior to the fixed version in the Washington release of Now Platform

Description The issue is an authorization bypass vulnerability that could enable an authenticated user to access unauthorized data stored within the Now Platform. It is estimated that over 481,000 instances may be affected.

Recommendations For versions prior to the fixed version in the Washington release of Now Platform, update to the latest patch or family release that addresses this issue. As a temporary workaround, consider restricting access to sensitive data within the Now Platform until a patch is applied.