Vulnerability Calculator Script is not working.

[Lakshaya22]

Hi,

1. I recently created a vulnerability calculator using a scripting condition to update the VITs Priority. Currently, the calculator only works when the “Reapply Calculator” UI action is triggered manually. It does not run automatically otherwise. Could someone help me understand how this UI action is configured and what changes are required to ensure the calculator runs on a daily basis? 

2. Additionally, I’m noticing inconsistent behavior with the calculator I created. When it is executed during non-business hours, all VITs are updated with the new priority values. However, when it is run at other times or randomly, only a few records are updated while the rest remain unchanged.

Could someone please help me understand why this inconsistency is occurring and how the calculator is expected to work in this scenario?

Any assistance appreciate. Thanks.!

[Tanushree Maiti]

Hi @Lakshaya22 

Each calculator contains a list of calculator rules, with a condition determining when to apply it. When the calculator is run, the condition for each calculator rule is evaluated in order, and the first matching calculator rule is used.

Vulnerability Calculator Rules

The base system calculator Default Risk Calculator contains the ruleDefault Risk Rule, a specialized vulnerability calculator rule called a Risk Rule. It calculates Risk Score based on multiple values:

• Vulnerability severity
• Exploit information
• Criticality
• External exposure of the CI with the vulnerability
• EPSS scores

Refer This servicenow documentation : Vulnerability Response calculators and vulnerability calculator rules 

And validate the rules at your end.

[Tanushree Maiti]

Also check this : https://www.servicenow.com/community/secops-forum/how-do-i-setup-servicenow-to-auto-recalculate-risk...