CVE-2024-8923

servicenow

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-8923

Katalog CVE

CVSS 10.0 · Critical EPSS 1,1%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada servicenow. Skor CVSS 3.1 10.0 (Critical) menurut NVD.

Deskripsi (NVD)

ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow deployed an update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

Rincian

Terbit di NVD
29 Oktober 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
10.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-94: Improper Control of Generation of Code ('Code Injection')
EPSS (30 hari)
1,1% peluang dieksploitasi; lebih tinggi dari 65,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
servicenow servicenow Versi xanadu early_availability
servicenow servicenow Versi xanadu early_availability_hotfix_1
servicenow servicenow Versi washington_dc
servicenow servicenow Versi washington_dc early_availability
servicenow servicenow Versi washington_dc early_availability_hotfix_1
servicenow servicenow Versi washington_dc patch_1
servicenow servicenow Versi washington_dc patch_1_hotfix_1
servicenow servicenow Versi washington_dc patch_1_hotfix_2
servicenow servicenow Versi washington_dc patch_1_hotfix_2a
servicenow servicenow Versi washington_dc patch_1_hotfix_2b
servicenow servicenow Versi washington_dc patch_1_hotfix_3b
servicenow servicenow Versi washington_dc patch_2
servicenow servicenow Versi washington_dc patch_2_hotfix_1
servicenow servicenow Versi washington_dc patch_2_hotfix_2
servicenow servicenow Versi washington_dc patch_3
servicenow servicenow Versi washington_dc patch_3_hotfix_1
servicenow servicenow Versi washington_dc patch_3_hotfix_2
servicenow servicenow Versi washington_dc patch_3_hotfix_3
servicenow servicenow Versi washington_dc patch_4
servicenow servicenow Versi washington_dc patch_4_hotfix_1
servicenow servicenow Versi vancouver
servicenow servicenow Versi vancouver early_availability
servicenow servicenow Versi vancouver early_availability_hotfix_1
servicenow servicenow Versi vancouver early_availability_hotfix_2
servicenow servicenow Versi vancouver patch_1
servicenow servicenow Versi vancouver patch_1_hotfix_1
servicenow servicenow Versi vancouver patch_2
servicenow servicenow Versi vancouver patch_2_hotfix_1
servicenow servicenow Versi vancouver patch_2_hotfix_1a
servicenow servicenow Versi vancouver patch_2_hotfix_2
servicenow servicenow Versi vancouver patch_2_hotfix_3
servicenow servicenow Versi vancouver patch_2_hotfix1a
servicenow servicenow Versi vancouver patch_3
servicenow servicenow Versi vancouver patch_3_hotfix_1
servicenow servicenow Versi vancouver patch_3_hotfix_2
servicenow servicenow Versi vancouver patch_3_hotfix_3
servicenow servicenow Versi vancouver patch_3_hotfix_4
servicenow servicenow Versi vancouver patch_4
servicenow servicenow Versi vancouver patch_4_hotfix_1
servicenow servicenow Versi vancouver patch_4_hotfix_1a
servicenow servicenow Versi vancouver patch_4_hotfix_1b
servicenow servicenow Versi vancouver patch_4_hotfix_2b
servicenow servicenow Versi vancouver patch_5
servicenow servicenow Versi vancouver patch_5_hotfix_1
servicenow servicenow Versi vancouver patch_6
servicenow servicenow Versi vancouver patch_6_hotfix_1
servicenow servicenow Versi vancouver patch_6_hotfix_2
servicenow servicenow Versi vancouver patch_7
servicenow servicenow Versi vancouver patch_7_hotfix_1
servicenow servicenow Versi vancouver patch_7_hotfix_1a
servicenow servicenow Versi vancouver patch_7_hotfix_2
servicenow servicenow Versi vancouver patch_7_hotfix_2a
servicenow servicenow Versi vancouver patch_7_hotfix_2b
servicenow servicenow Versi vancouver patch_7_hotfix_3a
servicenow servicenow Versi vancouver patch_7_hotfix_3b
servicenow servicenow Versi vancouver patch_7_hotfix_4
servicenow servicenow Versi vancouver patch_7_hotifix_1a
servicenow servicenow Versi vancouver patch_7_hotifix_1b
servicenow servicenow Versi vancouver patch_7_hotifix_2a
servicenow servicenow Versi vancouver patch_7_hotifix_2b

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 69 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.