Vendor
servicenow
On CISA KEV2Public exploit5Avg CVSS7.7
CVEs in the catalog
31
since 2023-04
Months in the top 100
1
months with a stored rank
Best rank
#91
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| servicenow ai platform | 14 | 45% |
| now platform | 11 | 35% |
| servicenow | 5 | 16% |
| jenkins plug in for servicenow devops | 2 | 6% |
| now assist ai agents | 1 | 3% |
| now user experience | 1 | 3% |
| servicenow records | 1 | 3% |
| virtual agent api | 1 | 3% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 7 | 23% |
| CWE-94 | 4 | 13% |
| CWE-284 | 3 | 10% |
| CWE-862 | 3 | 10% |
| CWE-89 | 3 | 10% |
| CWE-184 | 2 | 6% |
| CWE-639 | 2 | 6% |
| CWE-1220 | 1 | 3% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-86860 | CWE-862 | none yet | 9.3 | 2026-09-24 |
| CVE-2026-86859 | CWE-284 | none yet | 8.7 | 2026-09-24 |
| CVE-2026-13016 | CWE-89 | none yet | 9.3 | 2026-09-24 |
| CVE-2026-86858 | CWE-284 | none yet | 8.7 | 2026-09-24 |
| CVE-2026-86857 | CWE-862 | none yet | 8.4 | 2026-09-24 |
| CVE-2026-74820 | CWE-89 | none yet | 10 | 2026-08-27 |
| CVE-2026-18886 | CWE-284 | none yet | 10 | 2026-08-27 |
| CVE-2026-18885 | CWE-94 | none yet | 10 | 2026-08-27 |
| CVE-2026-6876 | CWE-693, CWE-1284 | none yet | 10 | 2026-08-27 |
| CVE-2026-6875 | CWE-94 | 1 | 9.5 | 2026-07-13 |
| CVE-2026-0542 | CWE-653 | 1 | 9.2 | 2026-02-25 |
| CVE-2025-12420 | CWE-250 | 1 | 9.3 | 2026-01-12 |
| CVE-2025-11449 | CWE-79 | 1 | 5.3 | 2025-10-10 |
| CVE-2025-11450 | CWE-79 | none yet | 5.3 | 2025-10-10 |
| CVE-2025-3089 | CWE-639 | none yet | 5.3 | 2025-08-12 |