Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-5194 State: PUBLISHED Published: 2024-05-22T11:00:05.367Z Last Updated: 2024-08-01T21:03:11.059Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Arris Products: VAP2500 Problem Types: CWE-77 Description: A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assoc_table.php. The manipulation of the argument id leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265831. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Co
ated identifier of this vulnerability is VDB-265831. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265831 - https://vuldb.com/?ctiid.265831 - https://vuldb.com/?submit.335252 - https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/a%2B%26%5BE4%3Flp5%3Fk9_%3D%5D/ARRIS_VAP2500-RCE-assoc_table.php.pdf
CVE ID: CVE-2024-5195 State: PUBLISHED Published: 2024-05-22T11:00:06.975Z Last Updated: 2024-08-01T21:03:11.096Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Arris Products: VAP2500 Problem Types: CWE-77 Description: A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file /diag_s.php. The manipulation of the argument customer_info leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265832. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refer
r of this vulnerability is VDB-265832. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265832 - https://vuldb.com/?ctiid.265832 - https://vuldb.com/?submit.335253 - https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/a%2B%26%5BE4%3Flp5%3Fk9_%3D%5D/ARRIS_VAP2500-RCE-diag_s.php.pdf
CVE ID: CVE-2024-5196 State: PUBLISHED Published: 2024-05-22T12:00:05.533Z Last Updated: 2024-08-01T21:03:11.134Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: Arris Products: VAP2500 Problem Types: CWE-77 Description: A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /tools_command.php. The manipulation of the argument cmb_header/txt_command leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265833 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai
r VDB-265833 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.265833 - https://vuldb.com/?ctiid.265833 - https://vuldb.com/?submit.335254 - https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/a%2B%26%5BE4%3Flp5%3Fk9_%3D%5D/ARRIS_VAP2500-RCE-tools_command.php.pdf
CVE ID: CVE-2024-5197 State: PUBLISHED Published: 2024-06-03T13:30:26.925Z Last Updated: 2025-02-13T17:54:05.905Z Vendors: Chromium Products: libvpx Problem Types: CWE-190 Description: There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct ma
integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://g-issues.chromium.org/issues/332382766 - https://lists.debian.org/debian-lts-announce/2024/06/msg00005.html
CVE ID: CVE-2024-5198 State: PUBLISHED Published: 2025-01-15T12:57:25.205Z Last Updated: 2025-01-15T14:49:09.099Z Vendors: OpenVPN Products: ovpn-dco, OpenVPN-GUI Problem Types: CWE-476 Description: OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.openvpn.net/openvpn/wiki/CVE-2024-5198
CVE ID: CVE-2024-5199 State: PUBLISHED Published: 2024-06-26T06:00:04.960Z Last Updated: 2024-10-28T20:11:51.036Z Vendors: Unknown Products: Spotify Play Button Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Spotify Play Button WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/a2cb8d7d-6d7c-42e9-b3db-cb3959bfd41b/
CVE ID: CVE-2024-5200 State: PUBLISHED Published: 2025-09-29T06:00:10.942Z Last Updated: 2025-11-13T20:55:45.847Z Vendors: Unknown Products: Postie Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Postie WordPress plugin before 1.9.71 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/4a517cf0-886a-47f1-a433-54a2288b2851/
CVE ID: CVE-2024-5201 State: PUBLISHED Published: 2024-05-23T19:11:48.936Z Last Updated: 2024-08-01T21:03:11.090Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenText Products: Dimensions RM Problem Types: CWE-287 Description: Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000029985
CVE ID: CVE-2024-5202 State: PUBLISHED Published: 2024-05-23T19:11:44.819Z Last Updated: 2024-08-01T21:03:11.078Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: OpenText Products: Dimensions RM Problem Types: CWE-200 Description: Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000029988
CVE ID: CVE-2024-5203 State: REJECTED Published: 2024-06-12T08:51:59.518Z Last Updated: 2024-09-13T10:15:30.617Z Description: No description available.
CVE ID: CVE-2024-5204 State: PUBLISHED Published: 2024-05-29T02:00:35.975Z Last Updated: 2024-08-01T21:03:10.987Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: boomdevs Products: Swiss Toolkit For WP Problem Types: CWE-288 Authentication Bypass Using an Alternate Path or Channel Description: The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.7. This is due to the plugin storing custom data in post metadata without an underscore prefix. This makes it possible for authenticated attackers with contributor-level and above permissions to log in as any existing user on the site, such as an adm
icated attackers with contributor-level and above permissions to log in as any existing user on the site, such as an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a8526106-847a-420f-9275-f759a8dd4dfb?source=cve - https://plugins.trac.wordpress.org/browser/swiss-toolkit-for-wp/trunk/includes/plugins/class-boomdevs-swiss-toolkit-generate-login-url.php?rev=3077000#L50 - https://plugins.trac.wordpress.org/changeset/3091913/swiss-toolkit-for-wp
CVE ID: CVE-2024-5205 State: PUBLISHED Published: 2024-05-24T03:07:43.645Z Last Updated: 2024-08-01T21:03:11.085Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: naa986 Products: Videojs HTML5 Player Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Videojs HTML5 Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videojs_video shortcode in all versions up to, and including, 1.1.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access
escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4ffd76a2-6700-4c2a-858d-4c7339a8d09a?source=cve - https://plugins.trac.wordpress.org/browser/videojs-html5-player/trunk/videojs-html5-player.php#L258 - https://plugins.trac.wordpress.org/changeset/3091226/#file1 - https://wordpress.org/plugins/videojs-html5-player/#developers
CVE ID: CVE-2024-5206 State: PUBLISHED Published: 2024-06-06T18:28:14.267Z Last Updated: 2024-08-01T21:03:11.034Z Severity: MEDIUM (CVSS 4.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: scikit-learn Products: scikit-learn/scikit-learn Problem Types: CWE-921 Description: A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0. The vulnerability arises from the unexpected storage of all tokens present in the training data within the `stop_words_` attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior
_` attribute, rather than only storing the subset of tokens required for the TF-IDF technique to function. This behavior leads to the potential leakage of sensitive information, as the `stop_words_` attribute could contain tokens that were meant to be discarded and not stored, such as passwords or keys. The impact of this vulnerability varies based on the nature of the data being processed by the vectorizer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/14bc0917-a85b-4106-a170-d09d5191517c - https://github.com/scikit-learn/scikit-learn/commit/70ca21f106b603b611da73012c9ade7cd8e438b8
CVE ID: CVE-2024-5207 State: PUBLISHED Published: 2024-05-30T05:33:15.366Z Last Updated: 2024-08-01T21:03:11.068Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: wpexpertsio Products: Post SMTP – The WordPress SMTP Plugin with Email Logs and Mobile App for Email Failure Notifications Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications plugin for WordPress is vulnerable to time-based SQL Injection via the selected parameter in all versions up to, and including, 2.9.3 due to insufficient e
to time-based SQL Injection via the selected parameter in all versions up to, and including, 2.9.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with administrator access or higher to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/103db583-9399-4a45-a316-808b55fc6a6c?source=cve - https://plugins.trac.wordpress.org/browser/post-smtp/trunk/Pos
ties/id/103db583-9399-4a45-a316-808b55fc6a6c?source=cve - https://plugins.trac.wordpress.org/browser/post-smtp/trunk/Postman/Postman-Email-Log/PostmanEmailQueryLog.php?rev=2974258#L262 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3094453%40post-smtp%2Ftrunk&old=3090744%40post-smtp%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-5208 State: PUBLISHED Published: 2024-06-19T06:13:21.660Z Last Updated: 2025-10-15T12:49:42.116Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-770 Description: An uncontrolled resource consumption vulnerability exists in the `upload-link` endpoint of mintplex-labs/anything-llm. This vulnerability allows attackers to cause a denial of service (DOS) by shutting down the server through sending invalid upload requests. Specifically, the server can be made to shut down by sending an empty body with a 'Content-Length: 0' header or by sending a body with arbitrary content, such
o shut down by sending an empty body with a 'Content-Length: 0' header or by sending a body with arbitrary content, such as 'asdasdasd', with a 'Content-Length: 9' header. The vulnerability is reproducible by users with at least a 'Manager' role, sending a crafted request to any workspace. This issue indicates that a previous fix was not effective in mitigating the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/6c8bdfa1-ec56-4b02-bde9-cfc27470e6ca - https://github.com/mintplex-labs/anything-llm/commit/e2439c6d4c3cfdacd96cd1b7b92d1f89c3cc8459
CVE ID: CVE-2024-5209 State: PUBLISHED Published: 2024-08-16T14:17:29.415Z Last Updated: 2025-08-21T15:27:18.878Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Printers Problem Types: CWE-770 Description: A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to deny printing capabilities until the system is rebooted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/422688
CVE ID: CVE-2024-5210 State: PUBLISHED Published: 2024-08-16T14:17:39.051Z Last Updated: 2025-08-21T15:27:36.864Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Printers Problem Types: CWE-770 Description: A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to prevent printer services from being reachable until the system is rebooted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/422688
CVE ID: CVE-2024-5211 State: PUBLISHED Published: 2024-06-12T11:33:42.236Z Last Updated: 2024-08-01T21:03:10.993Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-29 Description: A path traversal vulnerability in mintplex-labs/anything-llm allowed a manager to bypass the `normalizePath()` function, intended to defend against path traversal attacks. This vulnerability enables the manager to read, delete, or overwrite the 'anythingllm.db' database file and other files stored in the 'storage' directory, such as internal communication keys and .env secrets. Exploitation of this vulnerability
ed in the 'storage' directory, such as internal communication keys and .env secrets. Exploitation of this vulnerability could lead to application compromise, denial of service (DoS) attacks, and unauthorized admin account takeover. The issue stems from improper validation of user-supplied input in the process of setting a custom logo for the app, which can be manipulated to achieve arbitrary file read, deletion, or overwrite, and to execute a DoS attack by deleting critical files required for the application's operation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/38f282cb-7226-435e-9832-2d4a102dad4b - https://github.co
CVE Program Container: References: - https://huntr.com/bounties/38f282cb-7226-435e-9832-2d4a102dad4b - https://github.com/mintplex-labs/anything-llm/commit/e208074ef4c240fe03e4147ab097ec3b52b97619
CVE ID: CVE-2024-5212 State: PUBLISHED Published: 2024-08-31T04:29:19.112Z Last Updated: 2024-09-03T18:02:42.074Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: tagDiv Products: tagDiv Composer Problem Types: CWE-79 Description: The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ parameter in all versions up to, and including, 5.0 due to insufficient input sanitization and output escaping within the on_ajax_register_forum_user function. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an
attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/db95415a-5354-498b-8368-58c47d9948de?source=cve - https://tagdiv.com/newspaper/
CVE ID: CVE-2024-5213 State: PUBLISHED Published: 2024-06-20T02:15:33.551Z Last Updated: 2025-10-15T12:50:26.179Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-201 Description: In mintplex-labs/anything-llm versions up to and including 1.5.3, an issue was discovered where the password hash of a user is returned in the response after login (`POST /api/request-token`) and after account creations (`POST /api/admin/users/new`). This exposure occurs because the entire User object, including the bcrypt password hash, is included in the response sent to the frontend. This practice could potenti
bject, including the bcrypt password hash, is included in the response sent to the frontend. This practice could potentially lead to sensitive information exposure despite the use of bcrypt, a strong hashing algorithm. It is recommended not to expose any clues about passwords to the frontend. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/8794fb65-50aa-40e3-b348-a29838dbf63d - https://github.com/mintplex-labs/anything-llm/commit/9df4521113ddb9a3adb5d0e3941e7d494992629c
CVE ID: CVE-2024-5214 State: REJECTED Published: N/A Last Updated: 2024-06-03T18:30:38.902Z Description: No description available.
CVE ID: CVE-2024-5215 State: PUBLISHED Published: 2024-06-26T06:56:03.593Z Last Updated: 2024-08-01T21:03:11.127Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: devitemsllc Products: HT Mega – Absolute Addons For Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 2.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with co
anitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/86dfdc4f-1cc2-4b0d-b79c-bee3d6956eb4?source=cve - https://plugins.trac.wordpress.org/browser/ht-mega-for-elementor/trunk/includes/widgets/htmega_videoplayer.php#L520 - https://plugins.trac.wordpress.org/browser/ht-mega-for-elementor/trunk/includes/widgets/htmega_user_login_form.php#L1961 - https
plugins.trac.wordpress.org/browser/ht-mega-for-elementor/trunk/includes/widgets/htmega_user_login_form.php#L1961 - https://plugins.trac.wordpress.org/browser/ht-mega-for-elementor/trunk/includes/widgets/htmega_user_register_form.php#L2910 - https://plugins.trac.wordpress.org/changeset/3106524/ - https://wordpress.org/plugins/ht-mega-for-elementor/#developers
CVE ID: CVE-2024-5216 State: PUBLISHED Published: 2024-06-25T10:29:55.339Z Last Updated: 2024-08-01T21:03:11.036Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-400 Description: A vulnerability in mintplex-labs/anything-llm allows for a Denial of Service (DoS) condition due to uncontrolled resource consumption. Specifically, the issue arises from the application's failure to limit the size of usernames, enabling attackers to create users with excessively bulky texts in the username field. This exploit results in the user management panel becoming unresponsive, preventing administrators from
username field. This exploit results in the user management panel becoming unresponsive, preventing administrators from performing critical user management actions such as editing, suspending, or deleting users. The impact of this vulnerability includes administrative paralysis, compromised security, and operational disruption, as it allows malicious users to perpetuate their presence within the system indefinitely, undermines the system's security posture, and degrades overall system performance. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/8ec14991-ee35-493d-a8d3-21a1cfd57869 - https://github.com/mintplex-labs/anythin
References: - https://huntr.com/bounties/8ec14991-ee35-493d-a8d3-21a1cfd57869 - https://github.com/mintplex-labs/anything-llm/commit/3ef009de73c837f9025df8bba62572885c70c72f
CVE ID: CVE-2024-5217 State: PUBLISHED Published: 2024-07-10T16:28:32.649Z Last Updated: 2025-10-21T22:55:49.508Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ServiceNow Products: Now Platform Problem Types: CWE-184 Description: ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed in the listed patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already,
patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313 - https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293 - https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit