Back to CVE Browser

CVE-2024-4879

🔥 Known Exploited (CISA KEV)CRITICAL

9.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-07-10

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.

Affected Platforms (CPE)

📦

Servicenow

Servicenow

= utah= vancouver= washington_dc

References & Advisories

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154

🔗 https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154

🔗 https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4879

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

Global Cyber Intel Digest: July 22, 2026

Coverage of active exploitation targeting on-premise Microsoft SharePoint CVE-2026-50522, Qilin ransomware leveraging PAN-OS CVE-2026-0257 GlobalProtect authentication bypass, and critical security patch updates across enterprise networking hardware.

Global Cyber Intel Digest: July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

Related Vulnerabilities

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerabili...

CVE-2025-114505.3

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vu...

CVE-2025-114495.3

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vu...

CVE-2025-30895.3

ServiceNow has addressed a Broken Access Control vulnerability that was identified in the ServiceNow AI Platform. This vulnerabili...