Vulnerability Response Integration with CISA release notes

  • Release version: Store
  • Updated July 9, 2026
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Vulnerability Response Integration with CISA release notes

    The Vulnerability Response Integration with CISA application on the ServiceNow Store enables organizations to ingest and utilize data from the CISA Known Exploited Vulnerabilities (KEV) catalog. This integration enhances vulnerability prioritization and remediation efforts by providing timely and enriched vulnerability intelligence directly within ServiceNow’s Security Operations platform. The application has evolved through multiple versions, improving data accuracy, security controls, and visualization features.

    Show full answer Show less

    Key Features

    • Integration with CISA KEV Catalog: Automatically ingests known exploited vulnerabilities data to assist in effective prioritization and remediation.
    • Exploit Prediction Scoring System (EPSS) Support: Added support for EPSS data sources, improving the enrichment and predictive scoring of vulnerabilities.
    • Centralized Vulnerability Field Management: Vulnerability entry fields are now centrally managed to ensure consistency and remove local overrides.
    • Standardized Access Controls: Access control for Vulnerability Intelligence queries has been standardized to enforce consistent security across the product.
    • Data Validation Enhancements: The CISA transform script validates import queue entries before processing to improve data quality.
    • Improved Visualizations: Host vulnerable items are displayed via a consolidated pie chart based on external-facing risk ratings.
    • Risk Score Recalculation: Changes in CISA KEV status trigger automatic recalculation of associated vulnerability risk scores.

    Key Outcomes

    • Enhanced Vulnerability Prioritization: By integrating KEV and EPSS data, customers can better identify and focus on critical vulnerabilities with known exploits.
    • Improved Data Accuracy and Security: Standardized access controls and validation scripts ensure reliable and secure vulnerability data handling.
    • Streamlined Vulnerability Management: Centralized field management and automated risk score updates reduce manual effort and increase consistency.
    • Actionable Reporting: Visualization improvements support clearer insights into external-facing vulnerabilities by risk rating.

    Version history for the Security Operations Vulnerability Response Integration with CISA application on the ServiceNow Store.

    Important:
    For details on system requirements and family compatibility, view the application listing on the ServiceNow Store website.

    Version history

    Version 30.2.2 - July 2026
    Changed: Standardized access control for Vulnerability Intelligence queries to ensure consistent security enforcement across the product codebase
    Version 1.7.0 - June 2026 (USEM)
    Changed: Migrated query access control definitions in Vulnerability Intelligence to the standard product codebase, ensuring consistent access control enforcement.
    Version 30.2.1 - April 2026 (USEM)
    • New: Added support for Exploit Prediction Scoring System (EPSS) and Known Exploited Vulnerabilities (KEV) data sources to improve vulnerability data enrichment.
    • Changed:
      • Exploit Prediction Scoring System (EPSS) API processing now uses the Common Vulnerability Data (CVD) utility for more reliable record creation and updates.
      • Vulnerability entry fields are now managed centrally, removing the need for local overrides.
      • The CISA transform script now validates import queue entries before processing.
    Version 1.5.1 - August 2025
    Fixed: Resolved an issue where the Exploit Prediction Scoring System (EPSS) integration was not calculating or retrieving correct delta values between scoring updates. Delta calculations during data synchronization are considering changes between current and previous EPSS scores.
    Version 1.5.0 - November 2024
    Fixed: Minor fixes for this release.
    Version 1.4.1 - February 2024
    Changed: Combined and converted 4 single score tiles to a pie chart for host vulnerable items, which are external facing by risk rating.
    Version 1.3.1 - December 2023
    The Vulnerability Response integration with the CISA Known Exploited Vulnerabilities (KEVs) catalog ingests data to help you effectively prioritize and remediate these vulnerabilities.
    Version 1.2.4 - August 2023 (Vancouver)
    Changed: Made dictionary changes by moving the due_date and cisa_exists columns to NVD scope.
    Version 1.2.1 - March 2023
    • Changed:
      • "CISA Exists" column label on sn_vul_entry has been changed to "CISA KEV (BOD 22-01)".
      • Whenever the value in "CISA KEV (BOD 22-01)" changes, the vulnerability entry is flagged for recalculating the risk score on its associated VITs.
    Version 1.2.0 - February 2023
    • Changed:
      • "CISA Exists" column label on sn_vul_entry has been changed to "CISA KEV (BOD 22-01)".
      • Whenever the value in "CISA KEV (BOD 22-01)" changes, the vulnerability entry is flagged for recalculating the risk score on its associated VITs.
    Version 1.0.0 - August 2022
    The Vulnerability Response integration with the CISA Known Exploited Vulnerabilities (KEVs) catalog ingests data to help you effectively prioritize and remediate these vulnerabilities.