CVE-2025-12420 - Vulnerability Details

Related Threat Clusters

• ServiceNow Data Breach Exposes Customer Data via API Vulnerability

  ServiceNow confirmed a data breach on June 9, 2026, after attackers exploited an unauthenticated API endpoint, allowing access to sensitive customer data. The vulnerability, found in the endpoint…

  18 articles · Updated June 10, 2026
• Critical ServiceNow Vulnerability Allows Unauthenticated User Impersonation

  A critical vulnerability (CVE-2025-12420) in the ServiceNow AI Platform allows unauthenticated attackers to impersonate legitimate users and perform unauthorized operations. Discovered by AppOmni in October 2025, this…

  3 articles · Updated January 13, 2026
• Critical AI Security Flaw in ServiceNow Leads to User Impersonation Risk

  AppOmni identified a critical security vulnerability in ServiceNow's AI platform that could allow unauthenticated users to impersonate legitimate users and perform unauthorized actions. The flaw, designated…

  7 articles · Updated January 14, 2026
• Emergence of Agentic AI Raises Governance and Security Challenges

  In 2026, the rise of agentic AI is transforming how businesses operate, particularly in the financial services sector. This new technology allows for autonomous decision-making, which increases the potential impact of…

  3460 articles · Updated February 10, 2026

Recent Intelligence Reports

• ServiceNow Data Breach: Gated Advisory Left Customers Unaware of Exploited Zero — Techtimes · June 10, 2026
• ServiceNow patches vulnerability exploited against some customers — Cryptobriefing · June 10, 2026
• AI Capabilities Are Advancing Faster Than AI Security — F5 · February 26, 2026
• ServiceNow patches critical AI platform flaw that could allow user impersonation — Cyberscoop · January 13, 2026
• Critical ServiceNow Vulnerability Enables Privilege Escalation Via Unauthenticated User Impersonation — Cybersecuritynews · January 13, 2026

Related Entities