CVE-2024-5217 Incomplete Input Validation in GlideExpression Script

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addresse...

CVE-2024-4879 Jelly Template Injection Vulnerability in ServiceNow UI Macros

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...

CVE-2024-4879

CVE-2024-4879 affects ServiceNow Now Platform (Vancouver/Washington DC/Utah releases). It is an input-validation/template-injection flaw enabling unauthenticated remote code execution with network access and no user interaction, per multiple sources. The issue has high-severity CVSS values (aroun...

CVE-2024-5217

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addresse...

CVE-2024-4879: Improper Validation of Specified Type of Input

ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...

PT-2024-33224

Name of the Vulnerable Software and Affected Versions ServiceNow versions prior to the updated versions that include the security patches for the Vancouver and Washington DC Now Platform releases Description The issue is related to an improper input validation vulnerability that could enable an...

PT-2024-35129

Name of the Vulnerable Software and Affected Versions ServiceNow versions prior to the June 2024 patching cycle Description The issue is related to an input validation vulnerability that could enable an unauthenticated user to remotely execute code within the context of the Now Platform. This...

CVE-2024-5217: Incomplete List of Disallowed Inputs

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addresse...

ServiceNow Security Vulnerability

ServiceNow is a cloud computing platform from US-based ServiceNow, Inc. to help companies manage digital workflows for business operations. A security vulnerability exists in ServiceNow. An attacker exploiting this vulnerability could remotely execute code in the Now Platform's environment...

CVE-2024-5178: Incomplete List of Disallowed Inputs

ServiceNow has addressed a sensitive file read vulnerability that was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This vulnerability could allow an administrative user to gain unauthorized access to sensitive files on the web application server. The vulnerability i...

PT-2024-34905

Name of the Vulnerable Software and Affected Versions ServiceNow versions prior to the June 2024 patching cycle Description A sensitive file read issue was identified in the Washington DC, Vancouver, and Utah Now Platform releases. This could allow an administrative user to gain unauthorized acce...

CVE-2024-34692

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited...

CVE-2024-34692 [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited...

CVE-2024-34692 [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited...

CVE-2024-34692

CVE-2024-34692 concerns SAP Enable Now. The connected documents confirm an authentication requirement and a flaw where missing verification of file type or content allows an attacker to upload arbitrary files, including executables, which may be downloaded and executed by users, potentially hosti...

CVE-2024-39596 [CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application...

CVE-2024-39596 [CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application...

SAP Enable Now Code Issue Vulnerability

SAP Enable Now is a suite of collaborative content creation, management and sharing platforms from SAP, a German company. The platform is primarily used for online learning and training in SAP and non-SAP systems, among others. SAP Enable Now suffers from a code issue vulnerability that stems fro...

CVE-2024-34692: Unrestricted Upload of File with Dangerous Type

Due to missing verification of file type or content, SAP Enable Now allows an authenticated attacker to upload arbitrary files. These files include executables which might be downloaded and executed by the user which could host malware. On successful exploitation an attacker can cause limited...

CVE-2024-39596: Missing Authorization

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application...