ServiceNow patches three CVSS 10.0 flaws, but self-hosted users must act now