Critical ServiceNow Flaws Exploited in Global Reconnaissance Campaign

ServiceNow’s critical flaws, CVE-2024-4879, CVE-2024-5178, and CVE-2024-5217, are being actively exploited by threat actors. These vulnerabilities allows unauthorized users to execute code remotely, compromising government agencies, data centers, and private firms. Despite available patches, many systems remain vulnerable. Attackers are using payload injections to steal user lists and credentials, some of which are stored in plaintext. ServiceNow has released fixes, and users are strongly urged to update their systems immediately to mitigate these risks.