CVE-2024-4879: ServiceNow Utah, Vancouver, and Washington DC Now Platform: aktif olarak istismar edilen açık

Açıklama (NVD)

ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.

Özet bilgiler

EPSS

%99,98 (yüzdelik 100)

Yama

Yok / bilinmiyor

KEV

Eklenme: 2024-07-29 · Son tarih: 2024-08-19

Gerekli aksiyon: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Kaynaklar

• NVD kaydı
• CISA KEV kataloğu