Servicenow · Servicenow · CVE-2025-0337
**Name of the Vulnerable Software and Affected Versions**
ServiceNow versions prior to the fixed version in the Washington release of Now Platform
**Description**
The issue is an authorization bypass vulnerability that could enable an authenticated user to access unauthorized data stored within the Now Platform. It is estimated that over 481,000 instances may be affected.
**Recommendations**
For versions prior to the fixed version in the Washington release of Now Platform, update to the latest patch or family release that addresses this issue.
As a temporary workaround, consider restricting access to sensitive data within the Now Platform until a patch is applied.