psirt@servicenow.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS psirt@servicenow.com
03
assessed vulnerabilities (31)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-86860US | —OT elevated | — | ||
ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certa… | ||||
| CVE-2026-86859US | — | — | ||
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticat… | ||||
| CVE-2026-86858US | — | — | ||
ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in… | ||||
| CVE-2026-86857US | —OT elevated | — | ||
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an authenticated… | ||||
| CVE-2026-13016US | — | — | ||
ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circu… | ||||
| CVE-2026-74820US | — | — | ||
ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain ci… | ||||
| CVE-2026-6876US | — | — | ||
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This security issue could allow an unauthenticated user to execute arbi… | ||||
| CVE-2026-18886US | — | — | ||
ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in ce… | ||||
| CVE-2026-18885US | — | — | ||
ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circ… | ||||
| CVE-2026-6875US | — | Exploit | ||
ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certai… | ||||
| CVE-2026-0542US | — | Exploit | ||
ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certa… | ||||
| CVE-2025-12420US | critical9.8 | Exploit | ||
A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the imperson… | ||||
| CVE-2025-11450US | — | — | ||
ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being e… | ||||
| CVE-2025-11449US | — | Exploit | ||
ServiceNow has addressed a reflected cross-site scripting vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could result in arbitrary code being e… | ||||
| CVE-2025-3089US | — | — | ||
ServiceNow has addressed a Broken Access Control vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could allow a low privileged user to bypass acc… | ||||
| CVE-2025-3648US | — | — | ||
A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization. Under certain conditional access control list (ACL) configur… | ||||
| CVE-2025-0337US | — | — | ||
ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially coul… | ||||
| CVE-2024-5890US | — | — | ||
ServiceNow has addressed an HTML injection vulnerability that was identified in the Now Platform. This vulnerability could potentially enable an unauthenticated user to modify a we… | ||||
| CVE-2024-8924US | high7.5 | — | ||
ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorize… | ||||
| CVE-2024-8923US | critical10.0 | — | ||
ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code… | ||||