Description
ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Now Platform | ServiceNow / Now Platform | >= 0, < Utah Patch 10 Hot Fix 3 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Utah Patch 10a Hot Fix 2 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Utah Patch 10b Hot Fix 1 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 6 Hot Fix 2 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 7 Hot Fix 3b | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 8 Hot Fix 4 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 9 Hot Fix 1 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Vancouver Patch 10 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Washington DC Patch 1 Hot Fix 3b | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Washington DC Patch 2 Hot Fix 2 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Washington DC Patch 3 Hot Fix 2 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Washington DC Patch 4 | affected |
| Now Platform | ServiceNow / Now Platform | >= 0, < Washington DC Patch 5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10_hot_fix_3 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10a_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < utah_patch_10b_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_6_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_7_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_8_hot_fix_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_9_hot_fix_1 | affected |
| servicenow | servicenow / servicenow | >= 0, < vancouver_patch_10 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_1_hot_fix_3b | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_2_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_3_hot_fix_2 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_4 | affected |
| servicenow | servicenow / servicenow | >= 0, < washington_dc_patch_5 | affected |