ServiceNow warns of three max severity security vulnerabilities

ServiceNow patches three maximum severity flaws that could put enterprise data at risk

The vulnerabilities can be exploited remotely without user interaction; security teams should also look beyond ServiceNow to the credentials, APIs and workflows the platform can access.

ServiceNow warns of three max severity security vulnerabilities

ServiceNow released security patches for three new maximum-severity AI Platform vulnerabilities that can be exploited in code injection, SQL injection, and privilege escalation attacks. [...]

Three CVSS 10.0 Vulnerabilities in ServiceNow AI Platform Signal Escalating Infrastructure Risk

Three independent CVSS 10.0 vulnerabilities disclosed in ServiceNow’s AI Platform on Wednesday represent the second critical security advisory for the product in five weeks – and the first to expose how AI agent workflows amplify the blast radius of infrastructure flaws in enterprise environments. The KB3152242 advisory, published August 27, discloses three unauthenticated, zero-interaction vulnerabilities […]