Back to the CVE list
CVE-2024-4879 CISA KEV · Actively exploited

ServiceNow Improper Input Validation Vulnerability

CVSS score

—

EPSS probability

%100.0

Risk score

—

Published

2 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

CVE-2024-4879.py is a Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers. (★4)

Public PoCSource updated: 22.10.2025 11:43:42

Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability (★1)

Public PoCSource updated: 12.07.2024 23:23:42

CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow (★0)

Public PoCSource updated: 12.07.2024 19:47:44

Exploit for CVE-2024-4879 affecting Vancouver, Washington DC Now and Utah Platform releases (★0)

Public PoCSource updated: 16.07.2024 13:27:47

CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it. (★0)

Public PoCSource updated: 28.07.2024 16:53:53

Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers. (★0)

Public PoCSource updated: 14.08.2024 16:00:05

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879 (★0)

Public PoCSource updated: 27.08.2024 12:56:55

ServiceNow Multiple Versions - Input Validation & Template Injection

Exploit referenceSource updated: 11.08.2025 00:00:00

Nuclei: ServiceNow UI Macros - Template Injection

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-4879"