How many CVEs does ServiceNow ServiceNow AI Platform have?

ServiceNow ServiceNow AI Platform has 14 published CVE records since 2025.

How many ServiceNow ServiceNow AI Platform CVEs are in CISA KEV?

None of ServiceNow ServiceNow AI Platform's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for ServiceNow ServiceNow AI Platform vulnerabilities?

No ServiceNow ServiceNow AI Platform CVEs currently have a tracked public exploit in this dataset.

Which versions of ServiceNow ServiceNow AI Platform are affected?

94 distinct ServiceNow ServiceNow AI Platform versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ServiceNow ServiceNow AI Platform CVEs?

ServiceNow ServiceNow AI Platform's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization).

How many critical ServiceNow ServiceNow AI Platform vulnerabilities are there?

ServiceNow ServiceNow AI Platform has 8 critical and 3 high-severity CVEs.

What is the average severity of ServiceNow ServiceNow AI Platform CVEs?

The average CVSS base score across ServiceNow ServiceNow AI Platform's scored CVEs is 8.5.

ServiceNow AI Platform Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every ServiceNow AI Platform version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< Australia Patch 59 CVEs
< Australia Patch 2 Hot Fix 4b W325 CVEs
< Australia Patch 4 Hot Fix 35 CVEs
< Yokohama Patch 13 Hot Fix 5a5 CVEs
< Zurich Patch 10 Hot Fix 3b5 CVEs
< Zurich Patch 10 Hot Fix 4a W325 CVEs
< Zurich Patch 11 Hot Fix 35 CVEs
< Australia Patch 2 Hot Fix 34 CVEs
< Australia Patch 3 Hot Fix 24 CVEs
< Australia Patch 3m4 CVEs
< Australia Patch 44 CVEs
< Xanadu Patch 11 Hot Fix 7a4 CVEs
< Yokohama Patch 12 Hot Fix 3b4 CVEs
< Yokohama Patch 13 Hot Fix 44 CVEs
< Zurich Patch 10 Hot Fix 2m (m-branch)4 CVEs
< Zurich Patch 10 Hot Fix 3 (standard)4 CVEs
< Zurich Patch 114 CVEs
< Zurich Patch 124 CVEs
< Zurich Patch 7b Hot Fix 34 CVEs
< Zurich Patch 8 Hot Fix 54 CVEs
< Zurich Patch 9 Hot Fix 64 CVEs
< Australia General Availability (GA)2 CVEs
< Washington DC Patch 10 Hot Fix 7b2 CVEs
< Xanadu Patch 10 Hot Fix 1a2 CVEs
< Xanadu Patch 112 CVEs
< Yokohama Patch 7 Hot Fix 2a2 CVEs
< Yokohama Patch 82 CVEs
< Yokohama Patch 92 CVEs
< Zurich Patch 1 Hot Fix 1a2 CVEs
< Zurich Patch 22 CVEs
< Zurich Patch 32 CVEs
< Australia1 CVE
< Australia Patch 21 CVE
< Brazil EA1 CVE
< Brazil GA1 CVE
< Xanadu Patch 11 Hot Fix 1a1 CVE
< Yokohama Patch 10 Hot Fix 1b1 CVE
< Yokohama Patch 121 CVE
< Yokohama Patch 12 Hot Fix 1b1 CVE
< Yokohama Patch 131 CVE
< Zurich Patch 4 Hot Fix 3b1 CVE
< Zurich Patch 51 CVE
< Zurich Patch 7b1 CVE
< Zurich Patch 91 CVE
Aspen <= v < Xanadu Patch 7a1 CVE
Aspen <= v < Xanadu Patch 81 CVE
Aspen <= v < Yokohama Patch 1a1 CVE
Aspen <= v < Yokohama Patch 21 CVE
Aspen <= v < Zurich (EA)1 CVE

Fixed in

Australia Patch 59 CVEs
Australia Patch 2 Hot Fix 4b W325 CVEs
Australia Patch 4 Hot Fix 35 CVEs
Yokohama Patch 13 Hot Fix 5a5 CVEs
Zurich Patch 10 Hot Fix 3b5 CVEs
Zurich Patch 10 Hot Fix 4a W325 CVEs
Zurich Patch 11 Hot Fix 35 CVEs
Australia Patch 2 Hot Fix 34 CVEs
Australia Patch 3 Hot Fix 24 CVEs
Australia Patch 3m4 CVEs
Australia Patch 44 CVEs
Xanadu Patch 11 Hot Fix 7a4 CVEs

Find a version

14 CVEs

Sort

Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform
CVE-2026-86860
Patch
CWE-862
Critical · CVSS 9.3
EPSS 0.3% (21th pct)2026-09-24
Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform
CVE-2026-86859
Patch
CWE-284
High · CVSS 8.7
EPSS 0.3% (20th pct)2026-09-24
Unauthenticated SQL Injection in ServiceNow AI Platform
CVE-2026-13016
Patch
CWE-89
Critical · CVSS 9.3
EPSS 0.3% (19th pct)2026-09-24
Unauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform
CVE-2026-86858
Patch
CWE-284
High · CVSS 8.7
EPSS 0.3% (18th pct)2026-09-24
Authorization Bypass in ServiceNow AI Platform
CVE-2026-86857
Patch
CWE-862
High · CVSS 8.4
EPSS 0.2% (14th pct)2026-09-24
Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause
CVE-2026-74820
Patch
CWE-89
Critical · CVSS 10.0
EPSS 5.1% (92th pct)2026-08-27
Unauthenticated Privilege Escalation via System Configuration Image Upload Processor
CVE-2026-18886
Patch
CWE-284
Critical · CVSS 10.0
EPSS 5.0% (92th pct)2026-08-27
Unauthenticated Remote Code Execution in GraphQL Composite Data API
CVE-2026-18885
Patch
CWE-94
Critical · CVSS 10.0
EPSS 7.2% (94th pct)2026-08-27
Sandbox Escape in ServiceNow AI Platform
CVE-2026-6876
Patch
CWE-693
Critical · CVSS 10.0
EPSS 0.6% (49th pct)2026-08-27
Sandbox Escape in ServiceNow AI Platform
CVE-2026-6875
Patch
CWE-94
Critical · CVSS 9.5
EPSS 1.4% (73th pct)2026-07-13
Remote Code Execution in ServiceNow AI Platform
CVE-2026-0542
Patch
CWE-653
Critical · CVSS 9.2
EPSS 0.6% (48th pct)2026-02-25
Reflected Cross Site Scripting in ServiceNow AI Platform
CVE-2025-11449
Patch
CWE-79
Medium · CVSS 5.3
EPSS 0.4% (28th pct)2025-10-10
Reflected Cross Site Scripting in ServiceNow AI Platform
CVE-2025-11450
Patch
CWE-79
Medium · CVSS 5.3
EPSS 0.4% (28th pct)2025-10-10
Broken Access Control in ServiceNow AI Platform
CVE-2025-3089
Patch
CWE-639
Medium · CVSS 5.3
EPSS 0.4% (28th pct)2025-08-12

ServiceNow AI Platform Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other ServiceNow products

Frequently asked questions

References

Track ServiceNow AI Platform vulnerabilities