Back to CVE Browser

CVE-2024-5217

🔥 Known Exploited (CISA KEV)CRITICAL

9.2

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-07-10

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed in the listed patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.

Affected Platforms (CPE)

📦

Servicenow

Servicenow

= utah= vancouver= washington_dc

References & Advisories

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313

🔗 https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313

🔗 https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5217

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

Global Cyber Intel Digest: July 22, 2026

Coverage of active exploitation targeting on-premise Microsoft SharePoint CVE-2026-50522, Qilin ransomware leveraging PAN-OS CVE-2026-0257 GlobalProtect authentication bypass, and critical security patch updates across enterprise networking hardware.

Global Cyber Intel Digest: July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

Related Vulnerabilities

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerabili...

CVE-2025-114505.3

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vu...

CVE-2025-114495.3

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vu...

CVE-2025-30895.3

ServiceNow has addressed a Broken Access Control vulnerability that was identified in the ServiceNow AI Platform. This vulnerabili...