CVE-2024-4879

ServiceNow's Utah, Vancouver, and Washington DC Now Platform platforms allow unauthenticated remote code execution via jelly template injection in UI macros.

This vulnerability enables unauthenticated attackers to execute arbitrary code remotely, posing a severe risk to DIB organizations relying on ServiceNow for critical infrastructure management. The active exploitation status and remote code execution capability make this a high-priority compliance failure for FedRAMP and NIST 800-171 environments. DIB orgs must immediately patch affected platforms and audit all UI macro configurations to prevent unauthorized access.

Shame score — Active exploitation of a remote code execution vulnerability in a widely deployed platform demonstrates negligent security controls and creates significant reputational damage.