CVE-2021-45901: ServiceNow

Medium severity, CVSS 5.3. EPSS: 14.3% chance of exploitation in the next 30 days.

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists.

Affected products

• ServiceNow ServiceNow: version jakarta only

Published 2022-02-10. Last modified 2026-06-17.