ServiceNow patched four flaws, including three critical bugs enabling code execution, data theft, and privilege escalation.