agentprime: servicenow-now-platformEvery new CVE for servicenow-now-platform.https://agentprime.io/CVE-2025-3648: Data Inference in Now Platform via Conditional ACLshttps://agentprime.io/advisories/CVE-2025-3648/https://agentprime.io/advisories/CVE-2025-3648/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 16:07:11 GMTCVECVE-2025-0337: Authorization bypass in Now Platformhttps://agentprime.io/advisories/CVE-2025-0337/https://agentprime.io/advisories/CVE-2025-0337/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Mar 2025 16:29:12 GMTCVECVE-2024-5890: HTML Injection in the Assessment pluginhttps://agentprime.io/advisories/CVE-2024-5890/https://agentprime.io/advisories/CVE-2024-5890/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Dec 2024 18:24:55 GMTCVECVE-2024-8924: Unauthenticated Blind SQL Injection in Core Platformhttps://agentprime.io/advisories/CVE-2024-8924/https://agentprime.io/advisories/CVE-2024-8924/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2024 16:14:38 GMTCVECVE-2024-8923: Sandbox Escape in Now Platformhttps://agentprime.io/advisories/CVE-2024-8923/https://agentprime.io/advisories/CVE-2024-8923/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2024 16:07:07 GMTCVEcriticalCVE-2024-5217: Incomplete Input Validation in GlideExpression Scripthttps://agentprime.io/advisories/CVE-2024-5217/https://agentprime.io/advisories/CVE-2024-5217/CVSS 9.2 (Critical). Critical: In CISA’s KEV catalogue since 29 Jul 2024: it is known to be exploited. CVSS score 9.2: 9.0 or more. CVSS score 9.2 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jul 2024 16:28:32 GMTCVEcriticalKEVCVE-2024-5178: Incomplete Input Validation in SecurelyAccess APIhttps://agentprime.io/advisories/CVE-2024-5178/https://agentprime.io/advisories/CVE-2024-5178/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jul 2024 16:23:39 GMTCVECVE-2024-4879: Jelly Template Injection Vulnerability in ServiceNow UI Macroshttps://agentprime.io/advisories/CVE-2024-4879/https://agentprime.io/advisories/CVE-2024-4879/CVSS 9.3 (Critical). Critical: In CISA’s KEV catalogue since 29 Jul 2024: it is known to be exploited. CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jul 2024 16:16:39 GMTCVEcriticalKEVCVE-2022-43684: ACL bypass in Reporting functionalityhttps://agentprime.io/advisories/CVE-2022-43684/https://agentprime.io/advisories/CVE-2022-43684/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jun 2023 18:51:39 GMTCVEcriticalCVE-2022-46389: Cross-Site Scripting (XSS) vulnerability found on logout functionalityhttps://agentprime.io/advisories/CVE-2022-46389/https://agentprime.io/advisories/CVE-2022-46389/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Apr 2023 00:00:00 GMTCVECVE-2022-39048: Cross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment_redirecthttps://agentprime.io/advisories/CVE-2022-39048/https://agentprime.io/advisories/CVE-2022-39048/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Apr 2023 00:00:00 GMTCVE