Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2024-5217

🗓️ 10 Jul 2024 16:28:32Reported by SNType 
cve
 cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 275 Views

ServiceNow input validation vulnerability addresse

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2024-5217
10 Jul 202400:00
–attackerkb
ATTACKERKB		CVE-2024-4879
10 Jul 202400:00
–attackerkb
GithubExploit		Exploit for Improper Validation of Specified Type of Input in Servicenow
12 Jul 202413:02
–githubexploit
GithubExploit		Exploit for Improper Validation of Specified Type of Input in Servicenow
27 Aug 202403:43
–githubexploit
GithubExploit		Exploit for Improper Validation of Specified Type of Input in Servicenow
13 Sep 202401:20
–githubexploit
GithubExploit		Exploit for Improper Validation of Specified Type of Input in Servicenow
28 Jul 202406:51
–githubexploit
BDU FSTEC		The vulnerability of the Now Platform IT-infrastructure management system lies in its use of an incomplete blacklist when processing input data. This allows a perpetrator to execute arbitrary code.
23 Jun 202500:00
–bdu_fstec
Circl		CVE-2024-5217
10 Jul 202419:43
–circl
CISA KEV Catalog		ServiceNow Incomplete List of Disallowed Inputs Vulnerability
29 Jul 202400:00
–cisa_kev
CISA		 CISA Adds Three Known Exploited Vulnerabilities to Catalog
29 Jul 202412:00
–cisa
Rows per page
NVD
Node
OR
servicenowservicenowMatchutah-
servicenowservicenowMatchutahearly_availability
servicenowservicenowMatchutahpatch_1
servicenowservicenowMatchutahpatch_1_hotfix_1
servicenowservicenowMatchutahpatch_1_hotfix_1a
servicenowservicenowMatchutahpatch_1_hotfix_1b
servicenowservicenowMatchutahpatch_1_hotfix_2
servicenowservicenowMatchutahpatch_10
servicenowservicenowMatchutahpatch_10_hotfix_1
servicenowservicenowMatchutahpatch_10_hotfix_2
servicenowservicenowMatchutahpatch_10a
servicenowservicenowMatchutahpatch_10a_hotfix_1
servicenowservicenowMatchutahpatch_10b
servicenowservicenowMatchutahpatch_2
servicenowservicenowMatchutahpatch_2_hotfix_1
servicenowservicenowMatchutahpatch_2_hotfix_2
servicenowservicenowMatchutahpatch_2_hotfix_3
servicenowservicenowMatchutahpatch_2_hotfix_4
servicenowservicenowMatchutahpatch_3
servicenowservicenowMatchutahpatch_3_hotfix_1
servicenowservicenowMatchutahpatch_3_hotfix_1b
servicenowservicenowMatchutahpatch_4
servicenowservicenowMatchutahpatch_4_hotfix_1
servicenowservicenowMatchutahpatch_4_hotfix_2
servicenowservicenowMatchutahpatch_4_hotfix_2a
servicenowservicenowMatchutahpatch_4_hotfix_2b
servicenowservicenowMatchutahpatch_4_hotfix_3
servicenowservicenowMatchutahpatch_4_hotfix_3b
servicenowservicenowMatchutahpatch_4_hotfix_4
servicenowservicenowMatchutahpatch_4_hotfix_4b
servicenowservicenowMatchutahpatch_4_hotfix_5
servicenowservicenowMatchutahpatch_5
servicenowservicenowMatchutahpatch_5_hotfix_1
servicenowservicenowMatchutahpatch_6
servicenowservicenowMatchutahpatch_6_hotfix_1
servicenowservicenowMatchutahpatch_6_hotfix_2
servicenowservicenowMatchutahpatch_7
servicenowservicenowMatchutahpatch_7_hotfix_1
servicenowservicenowMatchutahpatch_7_hotfix_2
servicenowservicenowMatchutahpatch_7a
servicenowservicenowMatchutahpatch_7b
servicenowservicenowMatchutahpatch_8
servicenowservicenowMatchutahpatch_8_hotfix_2
servicenowservicenowMatchutahpatch_9
servicenowservicenowMatchutahpatch_9_hotfix_1
servicenowservicenowMatchutahpatch_9_hotfix_1a
servicenowservicenowMatchutahpatch_9_hotfix_1b
Node
OR
servicenowservicenowMatchvancouver-
servicenowservicenowMatchvancouverpatch_1
servicenowservicenowMatchvancouverpatch_1_hotfix_1
servicenowservicenowMatchvancouverpatch_2
servicenowservicenowMatchvancouverpatch_2_hotfix_1
servicenowservicenowMatchvancouverpatch_2_hotfix_1a
servicenowservicenowMatchvancouverpatch_2_hotfix_2
servicenowservicenowMatchvancouverpatch_2_hotfix_3
servicenowservicenowMatchvancouverpatch_2_hotfix1a
servicenowservicenowMatchvancouverpatch_3
servicenowservicenowMatchvancouverpatch_3_hotfix_1
servicenowservicenowMatchvancouverpatch_3_hotfix_2
servicenowservicenowMatchvancouverpatch_3_hotfix_3
servicenowservicenowMatchvancouverpatch_3_hotfix_4
servicenowservicenowMatchvancouverpatch_4
servicenowservicenowMatchvancouverpatch_4_hotfix_1
servicenowservicenowMatchvancouverpatch_4_hotfix_1a
servicenowservicenowMatchvancouverpatch_4_hotfix_1b
servicenowservicenowMatchvancouverpatch_4_hotfix_2b
servicenowservicenowMatchvancouverpatch_5
servicenowservicenowMatchvancouverpatch_5_hotfix_1
servicenowservicenowMatchvancouverpatch_6
servicenowservicenowMatchvancouverpatch_6_hotfix_1
servicenowservicenowMatchvancouverpatch_7
servicenowservicenowMatchvancouverpatch_7_hotfix_1
servicenowservicenowMatchvancouverpatch_7_hotfix_1a
servicenowservicenowMatchvancouverpatch_7_hotfix_2
servicenowservicenowMatchvancouverpatch_7_hotfix_2a
servicenowservicenowMatchvancouverpatch_7_hotfix_2b
servicenowservicenowMatchvancouverpatch_7_hotfix_3a
servicenowservicenowMatchvancouverpatch_7_hotfix_4
servicenowservicenowMatchvancouverpatch_7_hotifix_1a
servicenowservicenowMatchvancouverpatch_7_hotifix_1b
servicenowservicenowMatchvancouverpatch_7_hotifix_2a
servicenowservicenowMatchvancouverpatch_7_hotifix_2b
servicenowservicenowMatchvancouverpatch_8
servicenowservicenowMatchvancouverpatch_8_hotfix_1
servicenowservicenowMatchvancouverpatch_8_hotfix_2
servicenowservicenowMatchvancouverpatch_8_hotfix_3
servicenowservicenowMatchvancouverpatch_9
Node
OR
servicenowservicenowMatchwashington_dc-
servicenowservicenowMatchwashington_dcpatch_1
servicenowservicenowMatchwashington_dcpatch_1_hotfix_1
servicenowservicenowMatchwashington_dcpatch_1_hotfix_2
servicenowservicenowMatchwashington_dcpatch_1_hotfix_2a
servicenowservicenowMatchwashington_dcpatch_1_hotfix_2b
servicenowservicenowMatchwashington_dcpatch_2
servicenowservicenowMatchwashington_dcpatch_2_hotfix_1
servicenowservicenowMatchwashington_dcpatch_3
servicenowservicenowMatchwashington_dcpatch_3_hotfix_1
servicenowservicenowMatchwashington_dcpatch_4
servicenowservicenowMatchwashington_dcpatch_5
[
  {
    "defaultStatus": "unaffected",
    "product": "Now Platform",
    "vendor": "ServiceNow",
    "versions": [
      {
        "lessThan": "Utah Patch 10 Hot Fix 3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Utah Patch 10a Hot Fix 2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Utah Patch 10b Hot Fix 1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Vancouver Patch 6 Hot Fix 2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Vancouver Patch 7 Hot Fix 3b",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Vancouver Patch 8 Hot Fix 4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Vancouver Patch 9 Hot Fix 1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Vancouver Patch 10",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Washington DC Patch 1 Hot Fix 3b",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Washington DC Patch 2 Hot Fix 2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Washington DC Patch 3 Hot Fix 2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Washington DC Patch 4",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "Washington DC Patch 5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 08:15Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.19.8
CVSS 49.2
EPSS0.99628
SSVC
CWE-184CWE-697In Wild
servicenowinput validationvulnerabilitywashington dcvancouvernow platformunauthenticated usercode executionpatcheshot fixesjune 2024security patches
275