CVE-2025-11449: ServiceNow AI Platform XSS Vulnerability

CVE-2025-11449 Overview

ServiceNow disclosed a reflected cross-site scripting (XSS) vulnerability in the ServiceNow AI Platform. An attacker who convinces a ServiceNow user to click a specially crafted link can execute arbitrary script in the victim's browser session. The vulnerability is tracked as [CWE-79] and carries a CVSS 4.0 base score of 5.3 (MEDIUM).

ServiceNow deployed security updates to the majority of hosted instances. Self-hosted customers, partners, and hosted customers with unique configurations received patches and hot fixes through standard channels. Refer to the ServiceNow Knowledge Base Article for the complete list of remediated versions.

Critical Impact
Successful exploitation allows attacker-controlled JavaScript to run in a ServiceNow user's browser, enabling session token theft, unauthorized actions within the platform, and phishing overlays targeting privileged users.

Affected Products

ServiceNow AI Platform (hosted instances)
ServiceNow AI Platform (self-hosted deployments)
ServiceNow hosted customer instances with unique configurations

Discovery Timeline

2025-10-10 - CVE-2025-11449 published to the National Vulnerability Database
2026-06-17 - Last updated in NVD database

Technical Details for CVE-2025-11449

Vulnerability Analysis

The flaw is a reflected cross-site scripting vulnerability in the ServiceNow AI Platform. Reflected XSS occurs when a web application echoes attacker-controlled input from an HTTP request back into a response without sufficient encoding or validation. When a victim clicks a crafted URL, the injected payload executes in the context of the ServiceNow origin.

Because the payload runs inside the user's authenticated ServiceNow session, an attacker can read Document Object Model (DOM) content, invoke platform APIs on behalf of the user, and exfiltrate session data. The impact scales with the privileges of the targeted user, and administrators are typical high-value targets in these campaigns.

ServiceNow's advisory confirms remediation across hosted, self-hosted, and custom-configured environments. The vulnerability requires user interaction, which limits mass exploitation but aligns with targeted phishing tradecraft against enterprise SaaS tenants.

Root Cause

The root cause is improper neutralization of input during web page generation, classified as [CWE-79]. A parameter processed by the AI Platform is reflected into rendered output without adequate contextual output encoding, allowing script tags or event handlers to break out of the intended data context and execute as code.

Attack Vector

The attack vector is network-based and requires the victim to click a malicious link. Attackers typically distribute crafted URLs through email, chat, or compromised third-party sites. Once the victim's browser loads the reflected payload, the attacker inherits the victim's ServiceNow session context for the lifetime of the executed script.

No verified public proof-of-concept code is available for CVE-2025-11449 at the time of writing. See the ServiceNow Knowledge Base Article for vendor technical details.

Detection Methods for CVE-2025-11449

Indicators of Compromise

Inbound URLs to ServiceNow instances containing script fragments such as <script>, onerror=, javascript:, or URL-encoded equivalents (%3Cscript%3E).
Web proxy or SIEM records showing ServiceNow request parameters that reflect unusually long or encoded values from external referrers.
Unexpected outbound requests from user browsers to attacker-controlled domains immediately after visiting a ServiceNow URL.

Detection Strategies

Inspect web application firewall (WAF) and proxy logs for reflected XSS patterns targeting ServiceNow hostnames and URL parameters.
Correlate email gateway telemetry against ServiceNow URLs delivered from external senders, especially those with encoded query strings.
Review ServiceNow platform audit logs for anomalous session activity, API calls, or privilege changes that follow a user click event.

Monitoring Recommendations

Enable browser Content Security Policy (CSP) violation reporting where available and forward reports to your SIEM.
Monitor ServiceNow user-agent and referrer patterns to identify sessions redirected from unknown external origins.
Alert on repeated 4xx or 5xx responses that indicate probing of AI Platform endpoints with injection payloads.

How to Mitigate CVE-2025-11449

Immediate Actions Required

Apply the ServiceNow patches and hot fixes listed in KB2552817 to any self-hosted or uniquely configured instance.
Confirm that ServiceNow-managed hosted instances have received the vendor's security update by reviewing tenant patch status in the admin console.
Notify ServiceNow users of ongoing phishing risk and instruct them to avoid clicking ServiceNow links from untrusted sources.

Patch Information

ServiceNow has remediated CVE-2025-11449 in the patches and hot fixes documented in its knowledge base. Hosted customers received updates automatically, while self-hosted customers, partners, and hosted customers with unique configurations must apply the vendor-supplied updates. Consult the ServiceNow Knowledge Base Article for exact version numbers and upgrade paths.

Workarounds

Restrict access to the ServiceNow AI Platform to authenticated users on trusted networks until patches are deployed.
Enforce strict Content Security Policy headers at the reverse proxy layer to limit inline script execution.
Deploy browser isolation or URL rewriting on email gateways to neutralize crafted links targeting ServiceNow tenants.

bash

# Example: enforce a restrictive CSP at an upstream reverse proxy (nginx)
add_header Content-Security-Policy "default-src 'self'; script-src 'self'; object-src 'none'; frame-ancestors 'self'" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;