CVE-2024-4879

CRITICAL CISA KEV

Published Jul 10, 2024 Modified Nov 3, 2025 CWE-1287

Description

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.

CVSS v3.1 Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild.

Added: Jul 29, 2024 Remediation due: Aug 19, 2024

Weakness Type (CWE)

CWE-1287 CWE-1287

Affected Products

Vendor	Product	Versions
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All
servicenow	servicenow	All

References

Advisories & Patches

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154 https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154

Other References

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293 https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293 https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4879

Frequently Asked Questions

What is CVE-2024-4879? +

How severe is CVE-2024-4879? +

CVE-2024-4879 has a CVSS v3.1 score of 9.8 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.

What products are affected by CVE-2024-4879? +

CVE-2024-4879 affects products from servicenow, specifically: servicenow. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-4879? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-8125

Improper Validation of Specified Type of Input vulnerability in OpenText™ Content Management (Extended ECM) allows Parameter Injection. A bad actor …

CVE-2025-9041

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the …

CVE-2025-9042

A security issue exists due to improper handling of CIP Class 32’s request when a module is inhibited on the …

CVE-2025-61672

Synapse is an open source Matrix homeserver implementation. Lack of validation for device keys in Synapse before 1.138.3 and in …

CVE-2024-6298 10.0

Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series v3.08.01 allows …

CVE-2024-51550 10.0

Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. …

Quick Facts

CVSS Score: 9.8
Severity: CRITICAL
Published: Jul 10, 2024
KEV: Active Exploit

Scan for this vulnerability

Check if your website or infrastructure is affected by CVE-2024-4879.

Website Scan Port Scan

Browse CVEs

Critical High CISA KEV ! Most likely exploited →