Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL

ServiceNow released patches for four flaws affecting the ServiceNow AI Platform. Three are rated CVSS 10.0 and one is rated 8.7. Under certain circumstances, unauthenticated users could execute arbitrary code, modify instance data, or execute SQL statements.