<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: servicenow</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-8924: ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform</title><link>https://patchthecve.com/cve/CVE-2024-8924.html</link><guid>https://patchthecve.com/cve/CVE-2024-8924.html</guid><pubDate>Wed, 17 Jun 2026 08:23:34 +0000</pubDate><description>HIGH 7.5: ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and</description></item><item><title>CVE-2024-8923: ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform</title><link>https://patchthecve.com/cve/CVE-2024-8923.html</link><guid>https://patchthecve.com/cve/CVE-2024-8923.html</guid><pubDate>Wed, 17 Jun 2026 08:23:34 +0000</pubDate><description>CRITICAL 9.8: ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow deployed an update to hosted instances and ServiceNow provided the u</description></item><item><title>CVE-2024-5217: ServiceNow Incomplete List of Disallowed Inputs Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-5217.html</link><guid>https://patchthecve.com/cve/CVE-2024-5217.html</guid><pubDate>Wed, 17 Jun 2026 08:15:25 +0000</pubDate><description>CRITICAL 9.8: ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed i</description></item><item><title>CVE-2024-4879: ServiceNow Improper Input Validation Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-4879.html</link><guid>https://patchthecve.com/cve/CVE-2024-4879.html</guid><pubDate>Wed, 17 Jun 2026 08:03:05 +0000</pubDate><description>CRITICAL 9.8: ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instanc</description></item></channel></rss>