Share story
Security

ServiceNow issues patches for three CVSS 10 code-injection flaws

ServiceNow issues patches for three CVSS 10 code-injection flaws Image: Primary
ServiceNow said it has deployed patches across hosted instances and released hotfixes for self-hosted deployments after disclosure of four vulnerabilities in its AI platform and Now Platform. Three flaws, rated CVSS 10, allow code execution, arbitrary data changes or arbitrary SQL statements in low-complexity attacks without authentication or user interaction. A fourth, rated 8.7, is a sandbox-escape issue that can enable code execution. The self-hosted hotfixes cover the Xanadu, Yokohama, Zurich and Australia releases.
Sources
SecurityWeek
Published by Tech & Business, a media brand covering technology and business. This story was sourced from SecurityWeek and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital Products
Capital Products

Ramp raises $1.85 billion at $60 billion valuation

Ramp said it raised $1.85 billion at a $60 billion valuation, four months after raising $750 million at a $44 billion valuation. Dragoneer Investment Group, Thrive Capital, Founders Fund, Sands Capital and Avenir Growth co-led the...

TechCrunch
Capital AI
Capital AI

CarbonAI raises $12M for commercial property lending agents

CarbonAI has raised $12M in a round led by Cowboy Ventures for AI agents that handle commercial real estate loan underwriting, due diligence and monitoring after closing. Timber Grove Ventures, Bling Capital and Max Ventures also ...

The Next Web
Products Security
Products Security

Meta says it resolved unprompted audio recording on Ray-Ban glasses

Meta says it has resolved an issue that caused Ray-Ban smart glasses to invoke Meta AI and record audio without a user prompt. Users on Reddit reported recordings starting without the "Hey Meta" wake word; some said the wake word ...

9to5Google