csirt@kutim:~/threat-intel/cve/CVE-2024-8924

Katalog CVE

CVSS 7.5 · High EPSS 0,50%

Kerentanan Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') pada servicenow. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

Rincian

Terbit di NVD
29 Oktober 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
EPSS (30 hari)
0,50% peluang dieksploitasi; lebih tinggi dari 41,0% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
servicenow servicenow Versi xanadu
servicenow servicenow Versi xanadu early_availability
servicenow servicenow Versi xanadu early_availability_hotfix_1
servicenow servicenow Versi vancouver
servicenow servicenow Versi vancouver early_availability
servicenow servicenow Versi vancouver early_availability_hotfix_1
servicenow servicenow Versi vancouver early_availability_hotfix_2
servicenow servicenow Versi vancouver patch_1
servicenow servicenow Versi vancouver patch_1_hotfix_1
servicenow servicenow Versi vancouver patch_10
servicenow servicenow Versi vancouver patch_10_hotfix_1
servicenow servicenow Versi vancouver patch_2
servicenow servicenow Versi vancouver patch_2_hotfix_1
servicenow servicenow Versi vancouver patch_2_hotfix_1a
servicenow servicenow Versi vancouver patch_2_hotfix_2
servicenow servicenow Versi vancouver patch_2_hotfix_3
servicenow servicenow Versi vancouver patch_2_hotfix1a
servicenow servicenow Versi vancouver patch_3
servicenow servicenow Versi vancouver patch_3_hotfix_1
servicenow servicenow Versi vancouver patch_3_hotfix_2
servicenow servicenow Versi vancouver patch_3_hotfix_3
servicenow servicenow Versi vancouver patch_3_hotfix_4
servicenow servicenow Versi vancouver patch_4
servicenow servicenow Versi vancouver patch_4_hotfix_1
servicenow servicenow Versi vancouver patch_4_hotfix_1a
servicenow servicenow Versi vancouver patch_4_hotfix_1b
servicenow servicenow Versi vancouver patch_4_hotfix_2b
servicenow servicenow Versi vancouver patch_5
servicenow servicenow Versi vancouver patch_5_hotfix_1
servicenow servicenow Versi vancouver patch_6
servicenow servicenow Versi vancouver patch_6_hotfix_1
servicenow servicenow Versi vancouver patch_6_hotfix_2
servicenow servicenow Versi vancouver patch_7
servicenow servicenow Versi vancouver patch_7_hotfix_1
servicenow servicenow Versi vancouver patch_7_hotfix_1a
servicenow servicenow Versi vancouver patch_7_hotfix_2
servicenow servicenow Versi vancouver patch_7_hotfix_2a
servicenow servicenow Versi vancouver patch_7_hotfix_2b
servicenow servicenow Versi vancouver patch_7_hotfix_3a
servicenow servicenow Versi vancouver patch_7_hotfix_3b
servicenow servicenow Versi vancouver patch_7_hotfix_4
servicenow servicenow Versi vancouver patch_7_hotifix_1a
servicenow servicenow Versi vancouver patch_7_hotifix_1b
servicenow servicenow Versi vancouver patch_7_hotifix_2a
servicenow servicenow Versi vancouver patch_7_hotifix_2b
servicenow servicenow Versi vancouver patch_8
servicenow servicenow Versi vancouver patch_8_hotfix_1
servicenow servicenow Versi vancouver patch_8_hotfix_2
servicenow servicenow Versi vancouver patch_8_hotfix_3
servicenow servicenow Versi vancouver patch_8_hotfix_4
servicenow servicenow Versi vancouver patch_8_hotfix_5
servicenow servicenow Versi vancouver patch_9
servicenow servicenow Versi vancouver patch_9_hotfix_1
servicenow servicenow Versi vancouver patch_9_hotfix_2
servicenow servicenow Versi vancouver patch_9_hotfix_2a
servicenow servicenow Versi vancouver patch_9_hotfix_2b
servicenow servicenow Versi vancouver patch_9_hotfix_3a
servicenow servicenow Versi washington_dc
servicenow servicenow Versi washington_dc early_availability
servicenow servicenow Versi washington_dc early_availability_hotfix_1

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 87 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.