--- sourceDocument: washingtondc Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/delta-vancouver-washingtondc Release : - yokohama ft:locale : - en-US ft:publication_title : - washingtondc Combined Product Files ft:clusterId : - delta3wv bundleId : - delta3wv --- Combined Vulnerability Response release notes for upgrades from Vancouver to Washington DC ========================================================================================== Combined Vulnerability Response release notes for upgrades from Vancouver to Washington DC {#ariaid-title1} =========================================================================================================== * Release version: Yokohama * * Updated January 30, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 17 minutes to read Consolidated page of all release notes for Vulnerability Response from Vancouver to Washington DC. How to use this page -------------------- To help you prepare for your upgrade, we have combined the cross-family Vulnerability Response release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Vancouver to Washington DC. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." Important information for upgrading Vulnerability Response to Washington DC --------------------------------------------------------------------------- Before you upgrade to Washington DC, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-vulnerabilityresponse-summary__entry__2} | Release | Release notes | |---------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Vancouver | Due to a data model change in the Vulnerability Response application, upgrading might take noticeably longer than previous upgrades. For more information, see [KB0856498](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0856498). While upgrading to a newer version, the upgrade time might increase based on the data and version that you're upgrading from. This issue is due to additional schema changes that were added during the upgrade. For more information, see [KB0856498](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0856498). Starting with version 20.0 of the Vulnerability Response application and version 2.03 of the Vulnerability Emergency Response application, the Vulnerability Analyst Workspace is renamed to Vulnerability Assessment Workspace. All references to Vulnerability Analyst workspace now are Vulnerability Assessment workspace. | | Washington DC | No updates for this release. | [ ] New features ------------ Between your current release family and Washington DC, new features were introduced for Vulnerability Response. {#dfrn3-vulnerabilityresponse-summary__entry__8} | Release | Release notes | |---------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Vancouver | [Enhancements to the Unified Vulnerability Response Dashboard](https://www.servicenow.com/docs/access?context=vr-unified-dashboard&family=vancouver&ft:locale=en-US) : Starting with version 20.0, you can view the status on the EPSS scores attained by vulnerability entries, and external facing host vulnerable items on the Vulnerability Intelligence tab in the Unified Vulnerability Response dashboard. [Enhancements to the Software Bill of Materials applications](https://www.servicenow.com/docs/access?context=vr-sbom-exploring&family=vancouver&ft:locale=en-US) : Starting with version 20.0, you can view the vulnerability intelligence information about the Software Bill of Materials (SBOM) files that you upload in the SBOM Workspace dashboard. The following enhancements to the applications help you view more detailed vulnerability data about your components: * Import a version list for a given package (library) and the package intelligence for Stale and Abandoned components with the Deps.dev source API that is included with the SBOM Response application. * Import the vulnerability intelligence information for a given version of a package with the OSV.dev open-source API that is included with the SBOM Response application. * Import data with the third-party Snyk Vulnerability Insights integration to view information about how to fix the components. * View the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) data for the components that are broken down by severity. [CI Lookup Rules have moved](https://www.servicenow.com/docs/access?context=ci-identifier-rules&family=vancouver&ft:locale=en-US) : Starting with version 19.0, you can find the CI Lookup Rules module at Security OperationsCMDBLookup Rules in your instance. [Enhancements to the Software Bill of Materials applications](https://www.servicenow.com/docs/access?context=vr-sbom-install-apps&family=vancouver&ft:locale=en-US) : The data model for SBOM, SBOM Core, and the SBOM Response applications that are required for the Software Bill of Materials product have the following enhancements. These changes are compatible with the version 19.0.6 of the Vulnerability Response: * Data model for SBOM (version 1.0.4): The Display name field is new on the BOM Component table. This field uses the name and version as the displayed value of a component. * SBOM Core (version 1.0.8): The BOM Entities related list is added on the component form. You can see all the BOM entities that the component is used in on this related list. You can manually upload the BOM documents as expected. * SBOM Response (version 2.0.6): The data model is updated so that it supports the Vulnerability Intelligence use case. The Discovered application and SBOM component are two new fields that are displayed on the application vulnerable item (AVI) record.False positive and Request exception are supported on the AVIs in the SBOM Workspace. [Enhancements to the Software Bill of Materials applications](https://www.servicenow.com/docs/access?context=vr-sbom-exploring&family=vancouver&ft:locale=en-US) : View a list of the open source and third-party software components that include the transitive dependencies on a software bill of materials SBOM). Upload the SBOMs in the CycloneDX JSON format into your ServiceNow AI Platform: * View the potential risks in your software projects. * Identify the vulnerabilities in your components. * Manage your risk exposure by creating and assigning application-vulnerable items automatically. * Resolve the vulnerabilities with the Vulnerability Response workflow. [Configuring assessment types for penetration testing](https://www.servicenow.com/docs/access?context=pen-test-config-assessment-types&family=vancouver&ft:locale=en-US) : Enhancements give you more options to match the testing requirements to sprint availability: * Updates to the configuration page for effort estimation, assessment size, and assessment type let you enter more details about the testing requirements. * Creating a request or copying and modifying the existing requests can be done directly from the Penetration Test Assessment Requests \[sn_vul_pen_test_assessment_request\] table. * Additional fields for Vendor, Joint venture, and Business impact provide you with the options to record details about the third parties and the financial impact. [Dashboards in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vr-ws-dashboards&family=vancouver&ft:locale=en-US). : Starting with version 19.0 of Vulnerability Response, the Vulnerability Management (PA), CISO Dashboard, Vulnerability Approvals, Vulnerability Management, and Container Vulnerability Response dashboards are available in the Next Experience UI from Vulnerability Manager workspace. [Viewing the dashboards in the IT Remediation Workspace](https://www.servicenow.com/docs/access?context=vr-ws-itro-wkspce&family=vancouver&ft:locale=en-US). : Starting with version 19.0 of Vulnerability Response, the Vulnerability Remediation Dashboard is available in the Next Experience UI from IT Remediation workspace. [Unified Vulnerability Response Dashboard from the Vulnerability Response Workspaces](https://www.servicenow.com/docs/access?context=vr-unified-dashboard-content-pack&family=vancouver&ft:locale=en-US) : Starting with version 19.0 of Vulnerability Response, the Unified Vulnerability Response Dashboard is available from Vulnerability Response Workspaces. The centralized aggregated dashboard provides visibility from multiple vulnerability scanners and security tools. The dashboard provides a comprehensive view of an organization's vulnerabilities and risks. [Requesting exceptions for test result groups and Container Vulnerabilities from the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vr-ws-request-exception&family=vancouver&ft:locale=en-US) : Starting with version 19.0, you can request exceptions for test result groups and Container Vulnerabilities from Vulnerability Manager Workspace. [Requesting policy exceptions for test result groups and Container Vulnerabilities from the IT Remediation Workspace](https://www.servicenow.com/docs/access?context=vr-ws-request-exception-grc&family=vancouver&ft:locale=en-US) : Starting with version 19.0, you can request policy exceptions for test result groups, test results, and Container Vulnerabilities from IT Remediation Workspace. [Splitting remediation tasks for test results in the Vulnerability manager Workspace](https://www.servicenow.com/docs/access?context=vr-ws-exceptions-split-VMGR-ws&family=vancouver&ft:locale=en-US) : Starting with version 19.0, you can split remediation tasks for test results in Vulnerability Manager Workspace. [Splitting remediation tasks containing test results in the IT Remediation Workspace](https://www.servicenow.com/docs/access?context=vr-ws-split-task&family=vancouver&ft:locale=en-US) : Starting with version 19.0, you split remediation tasks for the test results in IT Remediation Workspace. [Weekly and daily frequency for Recurring Remediation Effort](https://www.servicenow.com/docs/access?context=vr-ws-create-recurringRE-steal-VI&family=vancouver&ft:locale=en-US) : Starting with version 19.0, you can schedule Recurring Remediation Efforts at daily and weekly frequencies in Vulnerability Manager Workspace. [Explore the Vulnerability Assessment workspace](https://www.servicenow.com/docs/access?context=vr-ws-vuln-analyst-workspace&family=vancouver&ft:locale=en-US) : The Vulnerability Emergency Response application is used by vulnerability event managers to address zero-day or critical vulnerabilities. By identifying the affected configuration items (CIs), vulnerability event managers can respond by generating vulnerable items and assigning them to the remediation team for analysis. Some key features are * Visibility to exposure from additional discovery model and assets * Ability to perform standalone assessments for a single CVE or vulnerable software for critical vulnerabilities * Automatic assessments of the Cybersecurity \& Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog or Common-Platform Enumeration (CPE)-based assessment. * Assess the exposure of your assets to zero-day vulnerabilities with [Exposure assessment in the workspace](https://www.servicenow.com/docs/access?context=vr-ws-exposure-assessment&family=vancouver&ft:locale=en-US). * Use the [Vulnerability Crisis Management](https://www.servicenow.com/docs/access?context=vulnerability-crisis-management&family=vancouver&ft:locale=en-US) workflow to handle vulnerability crisis events from creating a vulnerability assessment record, recording the key attributes of the vulnerability to calculate risks, performing an assessment to identify exposure levels and engage stakeholders for immediately responding to vulnerabilities. [Extension of a deferred vulnerable item before the due date](https://www.servicenow.com/docs/access?context=extend-defer-vul-item&family=vancouver&ft:locale=en-US) : Starting with version 20.0 of Vulnerability Response, you can request an extension for a deferred vulnerable item before the due date. [Extension of a deferred vulnerable item before the due date in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=extend-defer-vul-item-ws&family=vancouver&ft:locale=en-US) : Starting with version 20.0 of Vulnerability Response, you can request an extension for a deferred vulnerable item before the due date from Vulnerability Manager Workspace. [Extension of a deferred exception rule before the due date](https://www.servicenow.com/docs/access?context=extend-ex-rule-request&family=vancouver&ft:locale=en-US) : Starting with version 20.0 of Vulnerability Response, you can request an extension for a deferred exception rule before the due date. [Extension of a deferred remediation task before the due date](https://www.servicenow.com/docs/access?context=extend-defer-vuln-group&family=vancouver&ft:locale=en-US) : Starting with version 20.0 of Vulnerability Response, you can request an extension for a deferred remediation task before the due date. [Adding compensating controls in Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=create-compensatory-control&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, you can add compensating controls to the Compensating Controls library in Vulnerability Manager Workspace. [Reducing the risk using compensating controls on the exception management requests in IT Remediation Workspace](https://www.servicenow.com/docs/access?context=request-risk-reduction&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, you can request a reduction in the risk rating for a vulnerable item or remediation task by using Compensating Controls from IT Remediation Workspace. [Aggregated Reports Framework in Vulnerability Response Common](https://www.servicenow.com/docs/access?context=vulnerability-response-common-content-pack&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, you can create reports by using the Aggregated Reports Framework that is provided in Vulnerability Response Common for better performance. [Applying an exception rule on a deferred VI automatically](https://www.servicenow.com/docs/access?context=installed-with-vr&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, the Check Vulnerable Item and Groups Deferment Expiration system property checks if any exception rule is applicable on a deferred VI that is due and updates the Reason and Until fields as per the exception rule. [Accessing only the vulnerable items assigned to you and your group with the exception approver role](https://www.servicenow.com/docs/access?context=vr-assign-personas_SA&family=vancouver&ft:locale=en-US) : For the exception approver role, sn_vul.exception_approver, the granular role, sn_vul.read_all, has been removed so that you can access the vulnerable items and remediation tasks assigned to you and your group only. [Adding the work notes for a deferred vulnerable item](https://www.servicenow.com/docs/access?context=vulnerable-item-fields&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, you can add the relevant information in the Work Notes field for a deferred vulnerable item also. [Eliminating the need for exception management of closed VIs](https://www.servicenow.com/docs/access?context=vr-autoclose-detections&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, when a detection moves to the stale state, a closed VI remains in the closed state even though a new detection is identified. This change eliminates the need for requesting an exception request or approval for the reopened vulnerable items. [Set up a questionnaire for exception requests based on condition](https://www.servicenow.com/docs/access?context=exception-mgt-approval-rules&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, you can set up a questionnaire for exception requests based on condition specified in the approval rule. [Set up a questionnaire for false positive requests based on condition](https://www.servicenow.com/docs/access?context=exception-mgt-approval-rules&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, you can set up a questionnaire for false positive requests based on condition specified in the approval rule. [Set up a questionnaire for risk reduction requests based on condition](https://www.servicenow.com/docs/access?context=exception-mgt-approval-rules&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, you can configure a questionnaire for risk reduction requests based on condition specified in the approval rule. [Global search enabled for Vulnerability Response Workspaces](https://www.servicenow.com/docs/access?context=vr-wkspace-overview-v16&family=vancouver&ft:locale=en-US) : Starting from v20.0 of Vulnerability Response, Global search is enabled for Vulnerability Response Workspaces. [Receiving threat intelligence information from Qualys](https://www.servicenow.com/docs/access?context=vulnerability-fields&family=vancouver&ft:locale=en-US) : Starting from version 20.0 of Vulnerability Response, a new list Threat intel is included in the Third-Party Vulnerabilities Entries table. [Quick Start Tests for Vulnerability Response](https://www.servicenow.com/docs/access?context=available-quick-start-tests&family=vancouver&ft:locale=en-US) : After upgrades and deployments of new applications or integrations, run quick start tests to verify that Vulnerability Response works as expected. If you customized Vulnerability Response, copy the quick start tests and configure them for your customizations. | | Washington DC | [Compose a script for vulnerable items or remediation tasks in the Approval Configuration form](https://www.servicenow.com/docs/access?context=exception-mgt-approval-config&family=washingtondc&ft:locale=en-US) : Compose a script in the Approval Configurations form for vulnerable items or remediation tasks on which an approval rule must be applied. [View list of vulnerable items in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-home-page&family=washingtondc&ft:locale=en-US) : View the list of active vulnerable items in the Vulnerability Manager Workspace using the active records count next to the View by drop-down in the Host vulnerabilities tab on the Home page. [Open active vulnerable items list in classic UI from the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-home-page&family=washingtondc&ft:locale=en-US) : Navigate to the Classic UI's active vulnerable items list using the View Classic link in the Host Vulnerabilities tab on the home page of the Vulnerability Manager Workspace. [Refresh a remediation task in the Vulnerability Manager and IT Remediation Workspaces](https://www.servicenow.com/docs/access?context=refresh-vuln-items&family=washingtondc&ft:locale=en-US) : Refresh a remediation task (VUL#) in the Vulnerability Manager and IT Remediation Workspaces to inspected if there are any additional records that belong to a remediation task. [Updating the risk score in the Vulnerability Manager and IT Remediation Workspaces](https://www.servicenow.com/docs/access?context=vuln-calculators-rules&family=washingtondc&ft:locale=en-US) : Update the risk score of a vulnerable item (VIT) using the Calculate Risk Score button in the Vulnerability Manager and IT Remediation Workspaces as per vulnerability calculators. [Setting up questionnaire for exception requests based on condition](https://www.servicenow.com/docs/access?context=configure-exception-management-settings&family=washingtondc&ft:locale=en-US) : Configure questionnaires based on conditions for exception requests. [Displaying records in workspaces upon clicking the links in email notifications](https://www.servicenow.com/docs/access?context=t_DefineEmailNotifications&family=washingtondc&ft:locale=en-US) : When links are clicked in an email notification, records open in Vulnerability Manager Workspace or IT Remediation Workspace based on the user's role. [Analysing the vulnerability landscape in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-home-page&family=washingtondc&ft:locale=en-US) : View an overall summary of active vulnerabilities through visual representation of risk ratings, remediation progress, assignment group workloads, and records in remediation tasks. [Acquiring the summary of a set of vulnerabilities using filters](https://www.servicenow.com/docs/access?context=vmws-home-page-create-filter&family=washingtondc&ft:locale=en-US) : Display a summary of a set of active vulnerabilities by filtering those vulnerabilities on the Home page of the Vulnerability Manager Workspace. [Associating compensating controls with a CVE and TPE for risk reduction in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=associate-controls-cve-risk-reduction&family=washingtondc&ft:locale=en-US) : Associate relevant compensating controls with a Common Vulnerability Entry (CVE) and Third-party Entry (TPE), which can be used for reducing risk in the Vulnerability Manager Workspace. [Disabling or enabling risk reduction requests in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=disable-risk-reduction&family=washingtondc&ft:locale=en-US) : Enable or disable risk reduction requests for vulnerabilities related to a CVE or TPE in the Vulnerability Manager Workspace. [Using bulk edit in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/access?context=vmws-using-bulk-edit&family=washingtondc&ft:locale=en-US) : Perform the following tasks on multiple host vulnerable items (VITs) and remediation tasks simultaneously in the Vulnerability Manager Workspace: * [Update the state of VITs](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-update-state&family=washingtondc&ft:locale=en-US). * [Request an exception in bulk](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-request-exception&family=washingtondc&ft:locale=en-US). * [Mark VITs as false positive in bulk](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-request-false-positive&family=washingtondc&ft:locale=en-US). * [Update preferred solution for vulnerable items](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-patches-solutions&family=washingtondc&ft:locale=en-US). * [Assign VITs to an assignment group for remediation](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-assign&family=washingtondc&ft:locale=en-US). * [Remove assignments for vulnerable items](https://www.servicenow.com/docs/access?context=vmws-bulk-edit-unassign&family=washingtondc&ft:locale=en-US). [Receiving notifications on false positive and exception requests](https://www.servicenow.com/docs/access?context=vr-exception-management&family=washingtondc&ft:locale=en-US) : Receive notifications and reminders on false positive and exception requests change approval records by setting approval expiry and reminder dates on the approval rules. [Vulnerability Crisis Management](https://www.servicenow.com/docs/access?context=vulnerability-crisis-management&family=washingtondc&ft:locale=en-US) : View timestamps to see the last assessment of the events. The Assessment tab on the workspace is visible only when the new assessments are created. View the link to major security incidents on the Vulnerability Manager Workspace for vulnerable items. [CISA Known Exploit Vulnerability (KEV) Integration](https://www.servicenow.com/docs/access?context=cisa-vuln-integration&family=washingtondc&ft:locale=en-US) : Import the Common Security Advisory Framework (CSAF) format through XML/JSON file import, API calls, or advisories, and map the solutions with the related vulnerabilities. [Cybersecurity Executive Dashboard](https://www.servicenow.com/docs/access?context=vr-unified-CISO-dashboard&family=washingtondc&ft:locale=en-US) : Access a unified view of your organization's security landscape through the Cybersecurity Executive Dashboard, which consolidates data from various products from within the ServiceNow Security Operations suite. [Quick start tests](https://www.servicenow.com/docs/access?context=quick-start-tests&family=washingtondc&ft:locale=en-US) for Vulnerability Response. : After upgrades and deployments of new applications or integrations, run quick start tests to verify that Vulnerability Response still works. If you customized Vulnerability Response, copy the quick start tests and configure them for your customizations. [Update vulnerable items with data from last open detection (v21.1.2)](https://www.servicenow.com/docs/access?context=vr_host_detections&family=washingtondc&ft:locale=en-US) : Update vulnerable items with the most recent and accurate data from the last open detection by setting the system property sn_vul.show_last_open_detection to true. The vulnerable items' IP address, SSL, Port, Protocol, DNS name, NetBIOS name, and Description values are updated with the last open detection values during ingestion and the change of configuration item (CI) (Reapply of CI lookup rule). To apply this update to the existing VITs, execute the Update Last Open Detection Value To VITs scheduled job. This ensures that the last open detection values are correctly updated on all the existing VITs. [Create auto-close rules (v22.0)](https://www.servicenow.com/docs/access?context=create-auto-close-rules&family=washingtondc&ft:locale=en-US) : Vulnerability Managers can use the advanced auto-close rule functionality to automatically close stale detections along with their corresponding vulnerable items. [Solutions management improvements (v22.0)](https://www.servicenow.com/docs/access?context=vuln-solution-mgmt&family=washingtondc&ft:locale=en-US) : Performance improvements have been made for faster processing of non-Microsoft solutions. [Generic framework to ingest data from any solution vendor (v22.0)](https://www.servicenow.com/docs/access?context=ingest-data-solution-vendors-generic-framework&family=washingtondc&ft:locale=en-US) : A new generic framework has been introduced, leveraging the Common Security Advisory Framework (CSAF), to facilitate faster information exchange and processing through integrations. Leading software vendors offer the CSAF format for describing vulnerabilities and solutions. Solution data can be imported either through file upload or API integration. [Exclude inactive installs from Exposure Assessment (v22.0)](https://www.servicenow.com/docs/access?context=vr-ws-vuln-analyst-workspace&family=washingtondc&ft:locale=en-US) : A new system property, sn_vul.filter_inactive_sw_installs, has been introduced to determine whether inactive software installations should be filtered out for exposure assessment. By default, the property is enabled in the base system. When the filter is enabled, only active installations are displayed. [Prevent detections from getting converted into vulnerable items (v22.1.2)](https://www.servicenow.com/docs/access?context=exclusion-rules&family=washingtondc&ft:locale=en-US) : The Exclusion Rule feature in Vulnerability Response enables you to filter out low-priority vulnerabilities such as informational ones during ingestion, helping prevent the creation of vulnerable items. With this feature, only critical and high severity vulnerable items are created, thereby improving the overall performance of the product. [Enhancements to the Unified Vulnerability Response Dashboard (v22.1.2)](https://www.servicenow.com/docs/access?context=vr-unified-dashboard-content-pack&family=washingtondc&ft:locale=en-US) : If you've created any exclusion rules, you can now access Exclusion Rule Reports on the Unified Vulnerability Response Dashboard. [Enhanced Cybersecurity Executive Dashboard (v2.1.3)](https://www.servicenow.com/docs/access?context=vr-unified-CISO-dashboard&family=washingtondc&ft:locale=en-US) : The Cybersecurity Executive Dashboard v2.1.3 includes the following enhancements: * Key metrics from Governance, Risk, and Compliance (GRC) that offers a comprehensive overview of your organization's cybersecurity posture. * Direct access to the GRC dashboard through the Cybersecurity Executive Dashboard for seamless navigation and integration of essential risk and compliance information. * Operational Technology metrics that provide a comprehensive security perspective across both IT and OT environments, facilitating thorough risk management and monitoring. * An enhanced user experience with an intuitive and distinguishable dashboard design that scales effectively to accommodate the evolving needs of your organization. * Improved accuracy and reliability in metrics to ensure that the data presented in the dashboards is accurate, supporting better decision-making and strategic planning. | [ ] Changes ------- Between your current release family and Washington DC, some changes were made to existing Vulnerability Response features. {#dfrn3-vulnerabilityresponse-summary__entry__14} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | [ ] Removed ------- Between your current release family and Washington DC, some Vulnerability Response features or functionality were removed. {#dfrn3-vulnerabilityresponse-summary__entry__20} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | [ ] Deprecations ------------ Between your current release family and Washington DC, some Vulnerability Response features or functionality were deprecated. {#dfrn3-vulnerabilityresponse-summary__entry__26} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | [ ] Activation information ---------------------- Review information on how to activate Vulnerability Response. {#dfrn3-vulnerabilityresponse-summary__entry__32} | Release | Release notes | |---------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Vancouver | Install Vulnerability Response and Vulnerability Emergency Response by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=vancouver&ft:locale=en-US). | | Washington DC | Install Vulnerability Response by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=washingtondc&ft:locale=en-US). | [ ] Additional requirements ----------------------- If any additional requirements were introduced or changed for Vulnerability Response we have noted them here. {#dfrn3-vulnerabilityresponse-summary__entry__38} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | [ ] Browser requirements -------------------- If any specific browser requirements were introduced or changed for Vulnerability Response we have noted them here. {#dfrn3-vulnerabilityresponse-summary__entry__44} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | [ ] Accessibility information ------------------------- Review details on accessibility information for Vulnerability Response, such as specific requirements or compliance levels. {#dfrn3-vulnerabilityresponse-summary__entry__50} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | [ ] Localization information ------------------------ If there are specific localization considerations for Vulnerability Response we have noted them here. {#dfrn3-vulnerabilityresponse-summary__entry__56} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | [ ] Highlight information --------------------- If there are specific highlight considerations for Vulnerability Response we have noted them here. {#dfrn3-vulnerabilityresponse-summary__entry__62} | Release | Release notes | |---------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Vancouver | * Starting from version 20.0 of Vulnerability Response, request a reduction in risk for host vulnerable items and remediation tasks. * Starting from version 20.0 of Vulnerability Response, set up a questionnaire for exception requests based on condition. * Starting with version 20.0 of Vulnerability Response, manage critical vulnerabilities from inception to resolution using the Vulnerability Crisis Management workflow from the Vulnerability Assessment Workspace. * Starting from version 19.0 of Vulnerability Response, view the dashboards in the Vulnerability Response Workspaces. * Starting with version 19.0, assess the exposure of your assets to critical vulnerabilities by using the Vulnerability Assessment Workspace. See [Vulnerability Response](https://www.servicenow.com/docs/access?context=vuln-landing-page&family=vancouver&ft:locale=en-US) for more information. | | Washington DC | * Handle vulnerability crisis events through the Vulnerability crisis management workflow. * Access key metrics on vulnerabilities, misconfigurations and security incidents with industry and global benchmarks through executive-level monitoring of cybersecurity risks and initiatives and set targets through a new Cybersecurity Executive dashboard. * Get the overall summary of vulnerabilities with visualizations of all or prefiltered active vulnerabilities on the new Vulnerability Manager Workspace landing page. * Customize questionnaires for exception requests for a specific set of vulnerabilities. * Import the Common Security Advisory Framework (CSAF) format through XML/JSON file import, and map the solutions with the related vulnerabilities. See [Vulnerability Crisis Management](https://www.servicenow.com/docs/access?context=vulnerability-crisis-management&family=washingtondc&ft:locale=en-US) for more information. | [ ] *[\>]: and then