Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

ServiceNow has released patches for four security vulnerabilities in the ServiceNow AI Platform. Three of these flaws have a CVSS score of 10.0, indicating a high level of severity, and can be exploited by unauthenticated attackers under certain conditions. This could potentially allow attackers to execute code and SQL. The company has deployed a security update to its hosted instances and has provided the update to partners and self-hosted customers. Organizations that run their own instances are responsible for applying the update. The patches address serious security issues that could be exploited by attackers without authentication.