Hello, I want to understand what exactly is the difference between the Third party vulnerability entries and NVD, what kind of data are stored, is Third party vulnerability is alternative to NVD? Or does it store the actual instance of Vulnerability ...
How important is Container Inventory for the implementation of Container Vulnerabilities Response? If we are not discovering containers or have appropriate container information in the cmdb, how do we implement containers vulnerabilities, or should w...
Hello community, I'm currently implementing the Vulnerability Response Integration with Atlassian Jira integration for a customer. however I'm facing a rather bothering issue when it comes to state mapping. Within the ServiceNow platform, we have put...
I am trying to Use background script, which is timing out after a while.The script I am using identifies Vulnerable Items (VITs) that are linked to more than one Vulnerability record through the sn_vul_m2m_vul_group_item table and prints the results...
One of my observations is that a specific Exception Rule in ServiceNow Vulnerability Response was supposed to expire on 24 June 2025. However, a new Vulnerable Item (VIT1XXXXX) created this month still went into Deferred state, and it appears to hav...
Hi All, I have configured Defender Field Translation for the Priority field, but the Security Incident priority is not being populated as expected. I have also added logs for debugging; however, the logs are not captured in the System Log table.Could...
Has anyone implemented or tested the newer Qualys Deep Scan capability with the ServiceNow Vulnerability Response Qualys integration?We recently enabled Deep Scan in Qualys and found that the resulting vulnerability detections are successfully ingest...
Hi all. We have implemented Vulnerability response for servers and the process as a whole is working great. However, from the reporting perspective, we are looking to get a little than what I think is offered out of box. Leadership would like to see ...
Hello SIR Experts,Does anyone have a tried and true/battle-tested documented procedure for what to exclude/preserve/cleanup in a clone from production down to the lowers to prevent security incident data from being exposed anywhere other than product...
Hi all,I need to map the modified Severity field from our third-party vulnerability entries to a new custom field, u_risk_category. I'm seeking advice on the best table structure to use for this customization.Should the custom field be created on the...
Hi all, We are starting with our USEM migration journey.I had a few doubts on step 1. Which specific app do I need to install from the application manager? Is it 'Unified Security Exposure Management (App id: sn_vul_usem_common)'? There are a few app...
Hello Experts! Not sure I'm posting this on the correct forum, but here goes. Who has some experience with integrating ServiceNow with Entra? We use Entra as our SSO provider, and have been given a requirement to allow the help desk to send a user an...
Hello All, As you know, we have recently launched AI security exposure management (part of USEM) with integrations supported for Palo Alto Prisma AIRS, Cisco AI Defense, and Wiz. I also published a blog about this here We would appreciate your fe...
Hi, For Vulnerability response integration, I read that CI are created in Unmatched CI class if the IRE encounters an error while creating an Unclassed Hardware or Incomplete IP Class CIs.My question is how can we know what was the error that IRE enc...
Hi ServiceNow Experts, We have a ServiceNow Vulnerability integration with Rapid7. I wanted to understand the process after the raw CMDB data gets ingested into ServiceNow. When Integration runs, what data (and format of data) for CMDB CI are ingeste...
