Essential Upgrade: December NIST NVD API 1.0 Deprecation

[julian_azaret]

Spoiler

Upcoming changes to National Vulnerability Database (NVD) APIs - Upgrade Vulnerability Response to v17.1.4 or higher

Fellow community members,

The National Vulnerability Database plans to retire version 1.0 APIs in December 2023. (2022-23 Change Timeline (nist.gov)).

In response to this change, the ServiceNow Vulnerability Response team will upgrade the application 'Vulnerability Response Integration with NVD' from NVD v1.0 APIs to the more current and robust version 2.0 APIs to ensure continued seamless access to NVD data for our customers. This integration upgrade will be available with our November 2023 store release of 'Vulnerability Response Integration with NVD' v1.4.2.

These changes are essential to maintain the continuity and reliability of our Vulnerability Response products.

Backward Compatibility: To accommodate our customers, we have taken steps to ensure backward compatibility of this integration upgrade with Vulnerability Response. This means that your Vulnerability Response Application, starting from version 17.1.4 and above, will be fully compatible with the new NVD version 2.0 APIs integrated into our updated Vulnerability Response Integration with NVD v1.4.2 application.

Action Required: To ensure the continuity of your products usage and to avoid any potential downtime, please plan to complete the following steps:

1. Upgrade Vulnerability Response App (Timeline: End of November 2023): If you are using an older version of the Vulnerability Response application, please upgrade it to version 17.1.4 or a higher version by the end of November 2023. This is essential to maintain compatibility with our upcoming NVD v2.0 upgrade.
2. Upgrade Vulnerability Response Integration with NVD app: On November 7th 2023, we will release a new version v1.4.2 of our Vulnerability Response Integration with NVD application. Please install this upgrade promptly to ensure uninterrupted access to NVD data.

We understand the importance of the products we provide and are committed to making this transition as smooth as possible for you. If you encounter any challenges or have questions regarding this update, please do not hesitate to reach out to your account representative.

Questions? We would love to discuss in the comments below!

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1549068

Cheers,

Julian Azaret
Product Management, Security

[paul_gerigk]

Hi Julian,

many thanks for highlighting this! 🙂
I guess this will as well communicated in the "Vulnerability Response: Critical announcements for November and December releases" next week.

Since planning in Key:
Can you please provide a date/week when the NVD App v1.4.1 will be published on ServiceNow store?

BR Paul

[julian_azaret]

Thanks @paul_gerigk  - I have updated the initial article with the publish date of the store release - November 7th 2023