CVE-2025-11449: ServiceNow AI Platform 0 to before Washington DC Patch 10 Hot Fix 7b, 0 to before Xanadu Patch 10 Hot Fix 1a, 0 to…

Affected technology

ServiceNow AI Platform · 0 to before Washington DC Patch 10 Hot Fix 7b, 0 to before Xanadu Patch 10 Hot Fix 1a, 0 to before Xanadu Patch 11, 0 to before Yokohama Patch 7 Hot Fix 2a, 0 to before Yokohama Patch 8, 0 to before Yokohama Patch 9, 0 to before Zurich Patch 1 Hot Fix 1a, 0 to before Zurich Patch 2, 0 to before Zurich Patch 3, 0 to before Australia General Availability (GA)
ServiceNow

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · Passive user interaction

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 5.3/10) rates confidentiality, integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.