{"schema":"threatline.record/2","record":{"id":"CVE-2024-5217","aliases":[],"summary":"ServiceNow Incomplete List of Disallowed Inputs Vulnerability","details":"ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.","categories":["Applications & CMS"],"product":"Utah, Vancouver, and Washington DC Now Platform","vendor":"ServiceNow","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2024-5217","source_modified_at":"2025-10-21T22:55:49.508Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Now Platform","vendor":"ServiceNow","versions":[{"lessThan":"Utah Patch 10 Hot Fix 3","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Utah Patch 10a Hot Fix 2","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Utah Patch 10b Hot Fix 1","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Vancouver Patch 6 Hot Fix 2","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Vancouver Patch 7 Hot Fix 3b","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Vancouver Patch 8 Hot Fix 4","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Vancouver Patch 9 Hot Fix 1","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Vancouver Patch 10","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Washington DC Patch 1 Hot Fix 3b","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Washington DC Patch 2 Hot Fix 2","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Washington DC Patch 3 Hot Fix 2","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Washington DC Patch 4","status":"affected","version":"0","versionType":"custom"},{"lessThan":"Washington DC Patch 5","status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":9.2,"severity":"Critical","kev":{"listed":true,"date_added":"2024-07-29","due_date":"2024-08-19","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.99628,"percentile":0.9995,"score_date":"2026-10-23"},"published_at":"2024-07-10T16:28:32.649Z","modified_at":"2025-10-21T22:55:49.508Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2024-5217","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-21T22:55:49.508Z"},{"source":"Nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5217.yaml","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":null},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2024-5217","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Nuclei","EPSS"],"references":[{"source":"CVE List","url":"https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5217","source":"CISA KEV"},{"source":"CVE List","url":"https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293","tags":["x_login-required","x_transferred"]},{"source":"CVE List","url":"https://www.darkreading.com/cloud-security/patchnow-servicenow-critical-rce-bugs-active-exploit","tags":["x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5217","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"yes","technical_impact":"total","assessed_at":"2024-07-29T19:00:26.864987Z"},"exploits":[{"source":"Nuclei","kind":"Scanner template","name":"ServiceNow - Incomplete Input Validation","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5217.yaml"}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-21T22:55:49.508Z","content_hash":"5c97057e4a7d9639fb8a6ea79138ffc163a055f2b5924c21817ed802e9b189a2"}}