Description
ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Now Platform | ServiceNow / Now Platform | >= 0, < Utah Patch 10 Hot Fix 3 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Utah Patch 10a Hot Fix 2 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 6 Hot Fix 2 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 7 Hot Fix 3b | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 8 Hot Fix 4 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 9 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 10 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Washington DC Patch 1 Hot Fix 2b | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Washington DC Patch 2 Hot Fix 2 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Washington DC Patch 3 Hot Fix 1 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Washington DC Patch 4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_2b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |