--- sourceDocument: Store Version History Release Notes sourceDocumentLink: https://www.servicenow.com/docs/r/store-release-notes Release : - store ft:locale : - en-US ft:publication_title : - Store Version History Release Notes ft:clusterId : - rnst bundleId : - rnst --- # Vulnerability Response Integration with CISA release notes # Vulnerability Response Integration with CISA release notes {#ariaid-title1} Release version: Store Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Vulnerability Response Integration with CISA release notes The Vulnerability Response Integration with CISA application on the ServiceNow Store enables customers to ingest and utilize data from the CISA Known Exploited Vulnerabilities (KEVs) catalog. This integration helps prioritize and remediate vulnerabilities more effectively by enriching vulnerability data with authoritative external sources, including Exploit Prediction Scoring System (EPSS) and Known Exploited Vulnerabilities (KEV) data. Show full answer Show less ## Key Features * **Data Enrichment:** Integration with CISA KEV catalog and EPSS data sources to enhance vulnerability entries with exploit likelihood and known exploitation details. * **Improved Data Processing:** Use of the Common Vulnerability Data (CVD) utility for reliable creation and updates of vulnerability records and centralized management of vulnerability entry fields. * **Security and Access Control:** Standardized and consistent access control enforcement for Vulnerability Intelligence queries across the product codebase. * **Performance Enhancements:** Reduction of NVD sync times in large environments by batching EPSS score roll-ups and eliminating unnecessary lookups. * **Risk Scoring Updates:** Automatic flagging of vulnerability entries for risk score recalculation when CISA KEV status changes, ensuring up-to-date prioritization. * **Visualization Improvements:** Conversion of multiple score tiles into a consolidated pie chart for host vulnerable items, categorized by risk rating. ## Key Outcomes * Enhanced prioritization of vulnerabilities based on known exploitation and predicted exploit likelihood, enabling more focused and effective remediation efforts. * Improved reliability and efficiency in synchronizing vulnerability data from multiple sources. * Consistent security enforcement through standardized access controls within Vulnerability Intelligence. * Clear and actionable risk visualization for external-facing assets, supporting better decision-making by security teams. * Ongoing maintenance and fixes addressing scoring accuracy and integration stability to ensure trustworthy vulnerability insights. Version history for the Security Operations Vulnerability Response Integration with CISA application on the ServiceNow Store. Important: For details on system requirements and family compatibility, view the application listing on the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website. ## Version history Version 30.2.7 - October 2026 (USEM) : Fixed: For large environments, eliminated unnecessary lookups and reduced NVD sync times by consolidating per-entry EPSS score roll-ups into a batched process. Version 30.2.5 - September 2026 (USEM) : Fixed: Resolved an issue where EPSS score rollup might fail for third-party vulnerability entries without a defined value. Version 30.2.2 - July 2026 : Changed: Standardized access control for Vulnerability Intelligence queries to ensure consistent security enforcement across the product codebase Version 1.7.0 - June 2026 (USEM) : Changed: Migrated query access control definitions in Vulnerability Intelligence to the standard product codebase, ensuring consistent access control enforcement. Version 30.2.1 - April 2026 (USEM) : * New: Added support for Exploit Prediction Scoring System (EPSS) and Known Exploited Vulnerabilities (KEV) data sources to improve vulnerability data enrichment. * Changed: * Exploit Prediction Scoring System (EPSS) API processing now uses the Common Vulnerability Data (CVD) utility for more reliable record creation and updates. * Vulnerability entry fields are now managed centrally, removing the need for local overrides. * The CISA transform script now validates import queue entries before processing. {#store-secops-rn-vr-integration-with-cisa__ul_zk2_tls_t3c} Version 1.5.1 - August 2025 : Fixed: Resolved an issue where the Exploit Prediction Scoring System (EPSS) integration was not calculating or retrieving correct delta values between scoring updates. Delta calculations during data synchronization are considering changes between current and previous EPSS scores. Version 1.5.0 - November 2024 : Fixed: Minor fixes for this release.{#store-secops-rn-vr-integration-with-cisa__latest-store-secops-rn-vr-integration-with-cisa} {#store-secops-rn-vr-integration-with-cisa__latest-store-secops-rn-vr-integration-with-cisa} Version 1.4.1 - February 2024 : Changed: Combined and converted 4 single score tiles to a pie chart for host vulnerable items, which are external facing by risk rating. Version 1.3.1 - December 2023 : The Vulnerability Response integration with the CISA Known Exploited Vulnerabilities (KEVs) catalog ingests data to help you effectively prioritize and remediate these vulnerabilities. Version 1.2.4 - August 2023 (Vancouver) : Changed: Made dictionary changes by moving the due_date and cisa_exists columns to NVD scope. Version 1.2.1 - March 2023 : * Changed: * "CISA Exists" column label on sn_vul_entry has been changed to "CISA KEV (BOD 22-01)". * Whenever the value in "CISA KEV (BOD 22-01)" changes, the vulnerability entry is flagged for recalculating the risk score on its associated VITs. {#store-secops-rn-vr-integration-with-cisa__ul_d1k_h3p_qwb} {#store-secops-rn-vr-integration-with-cisa__ul_c1k_h3p_qwb} Version 1.2.0 - February 2023 : * Changed: * "CISA Exists" column label on sn_vul_entry has been changed to "CISA KEV (BOD 22-01)". * Whenever the value in "CISA KEV (BOD 22-01)" changes, the vulnerability entry is flagged for recalculating the risk score on its associated VITs. Version 1.0.0 - August 2022 : The Vulnerability Response integration with the CISA Known Exploited Vulnerabilities (KEVs) catalog ingests data to help you effectively prioritize and remediate these vulnerabilities.