cbcvebase.

Servicenow Virtual Agent Api vulnerabilities

1 known vulnerability affecting servicenow/virtual_agent_api.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-12420P2CRITICALCVSS 9.8fixed in 3.15.2≥ 4.0.0, < 4.0.4+1 more2026-01-12
CVE-2025-12420 [CRITICAL] CWE-250 CVE-2025-12420: A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticat A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonated user is entitled to perform. ServiceNow has addressed this vulnerability by deploying a relevant security update to hosted instances in October 2025. Security upda
nvd
Servicenow Virtual Agent Api vulnerabilities | cvebase