CVE AND CWE
Where can one find information related to the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE)
Forum Posts
Unable to Find "Wiz Fetch Vulnerabilities" Integration Processes
Hello Everyone, I am currently reviewing the documentation for the Vulnerability Response Integration with Wiz application and noticed that it mentions the following integration processes under Integration Processes Configuration:Wiz Fetch Vulnerabil...
SEM Workspace
The refresh rate for the reporting widgets in this operational dashboard is either daily or an on demand refresh. This is insufficient for operational purposes, is daily a performance limitation. Could this be reduced to hourly as a customization wi...
Resolved! OOB Update Record activity: Choice/Reference fields not working in Playbook
Using OOB Update Record activity in Playbook Designer on Security Incident (Zurich). String fields work, but Choice field (State) only accepts internal value not display value, and Reference field (Assignment Group) clears the sys_id right after past...
VR Exception rules taking excessive time on imports
Hi all, We have a non-ServiceNow GRC application that handles policy exceptions and garners business risk acceptance. When risk acceptance has been gained in the external system for exceptions to vulnerability or lifecycle policies (i.e. upgrading EO...
Resolved! OAuth 2.0 for Qualys Integration for Security Operations
Hello Forum, We're migrating the Qualys Vulnerability Integration (Qualys Integration for Security Operations) from Basic Auth to OAuth 2.0 on ServiceNow Zurich.Qualys's token endpoint (/auth/oidc) seems to require the credentials as two custom HTTP ...
Resolved! VR recalculate remediation target based on Risk Rating change date
Just exploring ideas here. Can you configure ServiceNow VR to use the date/time the VIT changed (in this case increase) its Risk Rating as the reference date for determining the Remediation Target date?Example scenario: - a VIT is created with risk r...
Closed/False positive Vulnerable items changed to Closed/Stale
Anyone else seeing this issue? We marked the VIT state to closed/false positive by submitting the false positive request. After approval on example VCAXXXXXX, state of VIT changes to Closed and sub state to False Positive.Later VR.system updated the...
Failed to process the SBOM: The undefined value has no properties.
Hi Folks, During the SBOM File Uploading in SBOM Workspace "In BOM Queue", getting the below error, can anyone suggest the corresponding steps for troubleshooting it. Failed to process the SBOM: The undefined value has no properties.
Does Lookup rules are intended to work via Scanned Applications to set the CI?
Servicenow recommendation : Audit the Lookup rule and ensure that lookup target is set to CI and target table is set to Scanned Applications. I understand the recommendation to use Scanned Applications as the target table. However, third party data h...
CI Lookup rules are not working
I have created a lookup rule to search the cmdb_ci_service_auto table using the Business Service ID and populate the corresponding CI in the Configuration Item field of the discovered application. However, the lookup is not working as expected; inste...
Resolved! USEM Exception Management - Questionnaires
In USEM Exception Management when I click on "Vulnerability Response" under Basic Configuration ->Exception Management Configuration to select existing questionnaires the Select Questionnaire box is empty (no records to display) even though the Asses...
About Integrating with Multiple Microsoft Teams Tenants
ServiceNow for Microsoft Teams is used to build ServiceNow and Microsoft Teams integration. OOTB recognizes that ServiceNow instances and Teams tenants can be integrated in a 1:1 relationship.Is there a way to integrate one instance of ServiceNow wit...
New "Encrypt with Module (sn_si.security_incident_Crypto_module)" option on Incident or SIR
Hi Community, We recently noticed a change when adding attachments to the Incident (incident) and Security Incident (sn_si_incident) tables. A new option called Encrypt with Module (sn_si.security_incident_Crypto_module) is now available when uploadi...
Assignment Rules and Classification Rules in Vulnerability Response
We have an instance where our Assignment Rules have conditions that are dependent on our Classification Rules and it is either creating a Race Condition or I am simply too inexperienced to understand what is going wrong.Context:- 2 Classification Rul...