ServiceNow ServiceNow AI Platform
17 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-103093 | < Yokohama Patch 13 Hot Fix 4a ; < Zurich Patch 10 Hot Fix 3b ; < Zurich Patch 12 ; … | Sandbox Escape via Table Rotation in ServiceNow AI Platform | CRITICAL 9.4 | 0.4 % | ||
| CVE-2026-6877 | < SR - CSM - Task Plan Templates v3.0 (Task Plan Templates application) | Domain Separation Bypass in ServiceNow AI Platform | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-103094 | < Xanadu Patch 11 Hot Fix 7a ; < Yokohama Patch 13 Hot Fix 4a ; < Zurich Patch 10 Hot Fix 3a ; … | Cleartext Storage of OAuth Credentials in ServiceNow AI Platform | HIGH 7.1 | 0.3 % | ||
| CVE-2026-86860 | < Yokohama Patch 13 Hot Fix 5a ; < Zurich Patch 10 Hot Fix 3b ; < Zurich Patch 10 Hot Fix 4a W32 ; … | Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-86859 | < Yokohama Patch 13 Hot Fix 5a ; < Zurich Patch 10 Hot Fix 3b ; < Zurich Patch 10 Hot Fix 4a W32 ; … | Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform | HIGH 8.7 | 0.3 % | ||
| CVE-2026-13016 | < Yokohama Patch 13 Hot Fix 5a ; < Zurich Patch 10 Hot Fix 3b ; < Zurich Patch 10 Hot Fix 4a W32 ; … | Unauthenticated SQL Injection in ServiceNow AI Platform | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-86858 | < Yokohama Patch 13 Hot Fix 5a ; < Zurich Patch 10 Hot Fix 3b ; < Zurich Patch 10 Hot Fix 4a W32 ; … | Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform | HIGH 8.7 | 0.3 % | ||
| CVE-2026-86857 | < Yokohama Patch 13 Hot Fix 5a ; < Zurich Patch 10 Hot Fix 3b ; < Zurich Patch 10 Hot Fix 4a W32 ; … | Authorization Bypass in ServiceNow AI Platform | HIGH 8.4 | 0.3 % | ||
| CVE-2026-74820 | < Xanadu Patch 11 Hot Fix 7a ; < Yokohama Patch 12 Hot Fix 3b ; < Yokohama Patch 13 Hot Fix 4 ; … | Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause | CRITICAL 10.0 | 5.1 % | ||
| CVE-2026-18886 | < Xanadu Patch 11 Hot Fix 7a ; < Yokohama Patch 12 Hot Fix 3b ; < Yokohama Patch 13 Hot Fix 4 ; … | Unauthenticated Privilege Escalation via System Configuration Image Upload Processor | CRITICAL 10.0 | 5.0 % | ||
| CVE-2026-18885 | < Xanadu Patch 11 Hot Fix 7a ; < Yokohama Patch 12 Hot Fix 3b ; < Yokohama Patch 13 Hot Fix 4 ; … | Unauthenticated Remote Code Execution in GraphQL Composite Data API | CRITICAL 10.0 | 7.2 % | ||
| CVE-2026-6876 | < Xanadu Patch 11 Hot Fix 7a ; < Yokohama Patch 12 Hot Fix 3b ; < Yokohama Patch 13 Hot Fix 4 ; … | Sandbox Escape in ServiceNow AI Platform | CRITICAL 10.0 | 0.6 % | ||
| CVE-2026-6875 | < Australia Patch 2 ; < Yokohama Patch 12 Hot Fix 1b ; < Yokohama Patch 13 ; … | Sandbox Escape in ServiceNow AI Platform | CRITICAL 9.5 | 1.4 % | ||
| CVE-2026-0542 | < Australia ; < Zurich Patch 5 ; < Zurich Patch 4 Hot Fix 3b ; … | Remote Code Execution in ServiceNow AI Platform | CRITICAL 9.2 | 0.7 % | ||
| CVE-2025-11449 | < Washington DC Patch 10 Hot Fix 7b ; < Xanadu Patch 10 Hot Fix 1a ; < Xanadu Patch 11 ; … | Reflected Cross Site Scripting in ServiceNow AI Platform | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-11450 | < Washington DC Patch 10 Hot Fix 7b ; < Xanadu Patch 10 Hot Fix 1a ; < Xanadu Patch 11 ; … | Reflected Cross Site Scripting in ServiceNow AI Platform | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-3089 | Aspen – < Washington DC Patch 10 Hot Fix 2a ; Aspen – < Xanadu Patch 7a ; Aspen – < Xanadu Patch 8 ; … | Broken Access Control in ServiceNow AI Platform | MEDIUM 5.3 | 0.4 % |