Vulnerability in Servicenow Now Platform
CVE-2025-3648
A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization. Under certain conditional access control list (ACL) configurations, this vulnerability could enable unauthenticated and…
EPSS: 0.003 (54.1th percentile) — read the EPSS interpretation.
Affected products
- Servicenow Now Platform — versions Aspen
Weakness classification (CWE)
References
- support.servicenow.com/kb (vendor-advisory)
- support.servicenow.com/kb (permissions-required)
- support.servicenow.com/kb (permissions-required)