How do i add the Vulnerability score (v4) to the VIT form

[Rume1]

How do i add the Vulnerability score (v4) to the VIT form. I want this field to be populated from the NVD table if a value exist for each CVE, just as the V3 and V2 score. I am tempted to use a business rule but I am open to any ideas.

[Bhuvan]

@Rume1 

Refer below article for guidance

https://www.servicenow.com/community/secops-forum/how-do-i-setup-servicenow-to-auto-recalculate-risk...

If this helped to answer your query, please mark it helpful & accept the solution.

Thanks,

Bhuvan

[Simon Hendery]

Hi @Bhuvan  - that article doesn't answer the question @Rume1 @has asked. 

[kaushal_snow]

Hi @Rume1 ,

You can add CVSS v4 vulnerability score to the VIT form by extending the existing Vulnerability Response integration (which as of the November 2024 release supports CVSS v4), then creating a field on the VIT table and populating it (via a Business Rule or Flow) by looking up the CVE in the sn_vul_nvd_entry (or related NVD integration) table and copying the v4 score into your new field when it exists...

If you found my response helpful, please mark it as ‘Accept as Solution’ and ‘Helpful’. This helps other community members find the right answer more easily and supports the community.

[Rume1 · Accepted solution]

Thanks all for the responses. I was able to figure this out. I created the CVSS V4 field on the Vulnerable Item form in form builder by dot-waking to the Vulnerability Entry table