ServiceNow security advisory (AV24-407)

Serial number: AV24-407
Date: July 18, 2024

On July 10, 2024, ServiceNow published security advisories to address critical vulnerabilities in the following products:

• ServiceNow Utah – multiple versions
• ServiceNow Vancouver – multiple versions
• ServiceNow Washington – multiple versions

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow UI Macros
• CVE-2024-5217 – Incomplete Input Validation in GlideExpression Script
• ServiceNow security advisories