CVE-2024-8923
CRITICALDescription
ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow deployed an update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.
Is your site exposed to CVE-2024-8923?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
| servicenow | servicenow |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-8923? +
How severe is CVE-2024-8923? +
What products are affected by CVE-2024-8923? +
How do I check if I'm vulnerable to CVE-2024-8923? +
Related Vulnerabilities
Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.217 , Tabby enables several high-risk Electron Fuses, including …
A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default …
Actual is an open-source personal finance application. In the macOS desktop application version 25.x (built on Electron 39.2.7), the ELECTRON_RUN_AS_NODE …
calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code …
FOSSBilling is a free, open-source billing and client management system. Versions 0.6.10 through 0.7.2 have a PHP code injection vulnerability …
zx is a tool for writing better scripts. An attacker with control over environment variable values can inject unintended environment …