- How many CVEs does Servicenow have?
- Servicenow has 29 published CVE records since 2018, including 8 in the last two years.
- How many Servicenow CVEs are in CISA KEV?
- Yes — 2 of Servicenow's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which Servicenow products have the most CVEs?
- The Servicenow products with the most published CVEs are ServiceNow, Now Platform, ServiceNow AI Platform, it service management, Jenkins plug-in for ServiceNow DevOps.
- What are the most common weakness types in Servicenow CVEs?
- Servicenow's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-184 (Incomplete List of Disallowed Inputs), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
- Are there public exploits for Servicenow vulnerabilities?
- Yes — 8 of Servicenow's CVEs have a known public exploit.
- How many critical Servicenow vulnerabilities are there?
- Servicenow has 7 critical and 5 high-severity CVEs.
- What is the average severity of Servicenow CVEs?
- The average CVSS base score across Servicenow's scored CVEs is 7.0.