---
sourceDocument: Store Version History Release Notes
sourceDocumentLink: https://www.servicenow.com/docs/r/store-release-notes

 Release :

    - store

ft:locale :

    - en-US

ft:publication_title :

    - Store Version History Release Notes

ft:clusterId :

    - rnst

bundleId :

    - rnst


---

# Vendor Risk Management integration with EcoVadis release notes

# Vendor Risk Management integration with EcoVadis release notes {#ariaid-title1}

* Release version: Store
* 
* Updated June 11, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Version history for the Vendor Risk Management integration with EcoVadis application on the ServiceNow Store.
Important:  
For details on system requirements and family compatibility, view the application listing on the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website.

## Version history

Version 22.3.0 - June 2026 (Australia)
:
    * Changed:
      * Added strict read-only enforcement to EcoVadis data fields to prevent unauthorized modifications.
      * Implemented query ACL security controls for CVE-2025-3648 vulnerability mitigation.
      {#store-grc-rn-vendor-risk-mgmt-ecovadis__ul_ixv_mv2_kjc}
    {#store-grc-rn-vendor-risk-mgmt-ecovadis__ul_edk_mv2_kjc}

Version 21.1.1 - December 2025 (Zurich)
:   Changed: Changes have been made to enable sn_vdr_risk_asmt.vendor_risk_admin to perform the necessary integration configurations, eliminating the need for a system administrator to do it.

Version 20.1.1 - May 2025
:   Changed: Matching criteria has been updated to improve identification of a third-party from risk score providers score feed.{#store-grc-rn-vendor-risk-mgmt-ecovadis__latest-store-grc-rn-vendor-risk-mgmt-ecovadis}
{#store-grc-rn-vendor-risk-mgmt-ecovadis__latest-store-grc-rn-vendor-risk-mgmt-ecovadis}

Version 18.1.0 - June 2024
:   Fixed: Removed possible script injection vulnerability in an encoded query script.

Version 15.0.3 - August 2022
:   Fixed: Added additional security checks to the EcoVadis API call

Version 14.1.2 - March 2022
:   New: Added ability to request an EcoVadis rating for a vendor from within ServiceNow

Version 13.0.1 - December 2021
:   The ServiceNow Vendor Risk Management application helps customers manage their third party risk management (TPRM) programs across a broad number of risk domains. Environmental, Social, and Goverance (ESG) is one of those
    risk domains that may necessitate the need to import information from content providers such as EcoVadis.