In USEM Exception Management when I click on "Vulnerability Response" under Basic Configuration ->Exception Management Configuration to select existing questionnaires the Select Questionnaire box is empty (no records to display) even though the Asses...
I'm trying to get an explanation why some of the data we are seeing on Vulnerable Items table is as it is. For example, when we look at the Vulnerable Items table, we see something like this: Look at the 3 right-most values (Assignment Group, Assi...
Vulnerability Response (VR) is a beast of an application; comprising of 4 different apps in one: VR, Application Vulnerability Response (AVR), Container Vulnerability Response (CVR), and Configuration Compliance (CC). Some of these ties to VR are re...
HiThe documentation for this application seems to imply it might not be compatible with post USEM versions of VR, can someone tell me if it is? I am getting 404 errors on integrations associated with it Red Hat Solutions Integration (which I can't fi...
Is there a developer guide, or something similar, for developing a custom integration with the VR module? We are trying to import AWS Security Hub findings into the VR module and looking for a bit more guidance than the online docs can provide. It's ...
We wanted to show assessor and requestor in the list view of smart assessments but I can't find those fields in the record. How to achieve it?
Hi, I am getting error below when running Vulnerability Response Integration with Tenable. My instance is on australia version Error: Invalid response code received from TenableSCPluginIntegration: 403. Access denied. You do not have permission to ac...
In Vulnerability Response, how do you manage the Unclassed Hardware [cmdb_ci_unclassed_hardware] table? In regards to VR integrations with third-party tools, ServiceNow automatically creates CIs on the Unclassed Hardware table when a CI is unmatched ...
I have put down my thoughts on how to handle Incomplete IP Identified Devices. I would like to hear your ideas on this topic. How is your organization handling them? (See Attachment)
i need to create playbook if security incident response record created based on condition like have category is policy violation i need to store in worknotes like kb article with the help of playbook ,
Hello, We're looking for guidance on how other organizations handle cross-functional work on Vulnerability Items (VITs) when SLA accountability remains with a single owning team.A VIT is assigned to and owned by a specific team with the remediation S...
Hi everyone,I’m currently facing an issue with the Wiz integration and would like to clarify how last found (mapped from lastDetectedAt) behaves, especially in relation to auto-closure rules. We have an auto-close rule that closes Vulnerable Items if...
Why Hardcoding substate == '25' in VR AJAX Logic "ExceptionSettingsAJAX" Is a Bad Practice OOTB Facts:1. As we know, selecting Mitigating Control (or substate 25) as a reason in "review_exception" UI Page as a reason, acts as a trigger for the defau...
Hello Forum, We're migrating the Qualys Vulnerability Integration (Qualys Integration for Security Operations) from Basic Auth to OAuth 2.0 on ServiceNow Zurich.Qualys's token endpoint (/auth/oidc) seems to require the credentials as two custom HTTP ...
Not sure this is the right place to submit a suggestion to developers to add fix/items to help EUE users workspaces Landing Page for tables in workspaces please add: a scroll bar at the top list table similar to the one at the bottom of the ...