ctrlINT What the industry said about every indicator, with the quote

CVE-2024-5217Vulnerability

ServiceNow Incomplete List of Disallowed Inputs Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 1 independent source · first reported by GreyNoise · last reported

Last reported 19 months ago

CISA KEVAdded 29 Jul 2024
Fix due 19 Aug 2024
Used by ransomware: not knownCISA KEV catalogue
EPSS99.6%
higher than 99% of CVEsFIRST EPSS, as of 22 Oct 2026

What the reports say

1 report, newest first · the exact sentence from each

  1. “CVE-2024-5217 (Critical)”

    GreyNoiseVendor
    Resurgence of In-The-Wild Activity Targeting Critical ServiceNow Vulnerabilities

Indicators reported together

named in the same reports

Also named with it: CVE-2024-4879, CVE-2024-5178

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2024-5217 here?
No account needed. We do not store your IP address.