返回 CVE 瀏覽器

CVE-2024-5217

🔥 Known Exploited (CISA KEV)CRITICAL

9.2

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-07-10

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed in the listed patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.

Affected Platforms (CPE)

📦

Servicenow

Servicenow

= utah= vancouver= washington_dc

References & Advisories

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313

🔗 https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293

🔗 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313

🔗 https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5217

相關資安分析文章

週度網絡安全新聞：2026 年 7 月 27 日

本週重大安全週報聚焦於 Check Point SmartConsole CVE-2026-16232 驗證繞過之在野利用、PAN-OS GlobalProtect 漏洞與 Qilin 勒索軟體侵襲、俄羅斯 LAUNDRY BEAR 對 Zimbra 進行之國家級郵件間諜活動，以及 Windchill 與 FakeGit 惡意 Repositories 威脅趨勢。

全球網絡威脅情報摘要：2026 年 7 月 22 日

本期摘要重點分析本地部署 Microsoft SharePoint 伺服器正遭主動利用之 CVE-2026-50522 漏洞、Qilin 勒索軟體利用 PAN-OS CVE-2026-0257 身分驗證繞過入侵企業 VPN，以及 Cisco 安全設備與關鍵基礎設施修補處置指南。

全球網絡威脅情報摘要：2026 年 7 月 21 日

本期威脅情報分析 VMware vCenter、F5 BIG-IP 與 GitLab 關鍵漏洞安全修補警訊，同時彙整最新醫療與關鍵基礎設施平台遭勒索軟體攻擊之防禦防範措施。

相關漏洞威脅

ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerabili...

CVE-2025-114505.3

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vu...

CVE-2025-114495.3

ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vu...

CVE-2025-30895.3

ServiceNow has addressed a Broken Access Control vulnerability that was identified in the ServiceNow AI Platform. This vulnerabili...