---
sourceDocument: Store Version History Release Notes
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/store-release-notes

 Release :

    - store

ft:locale :

    - en-US

ft:publication_title :

    - Store Version History Release Notes

ft:clusterId :

    - rnst

bundleId :

    - rnst


---

# Vendor Risk Management integration with EcoVadis release notes

# Vendor Risk Management integration with EcoVadis release notes {#ariaid-title1}

Release version: Store  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Version history for the Vendor Risk Management integration with EcoVadis application on the ServiceNow Store.
Important:  
For details on system requirements and family compatibility, view the application listing on the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website.

## Version history

Version 23.0.2 - September 2026 (Brazil)
:
    * New:
      * Added element assessment support in the Vendor Portal.
      * Migrated the SAE questionnaire widget to embeddable components.
      {#store-grc-rn-vendor-risk-mgmt-ecovadis__ul_hnz_22q_lkc}
    * Fixed:
      * Corrected questionnaire state transitions after return (PRB2034307).
      * Restored smart assessment questions for vendor issues (PRB2060073).
      * Corrected follow-up filter behavior (PRB2069551).
      {#store-grc-rn-vendor-risk-mgmt-ecovadis__ul_eyq_f2q_lkc}

Version 22.3.0 - June 2026 (Australia)
:
    * Changed:
      * Added strict read-only enforcement to EcoVadis data fields to prevent unauthorized modifications.
      * Implemented query ACL security controls for CVE-2025-3648 vulnerability mitigation.
      {#store-grc-rn-vendor-risk-mgmt-ecovadis__ul_ixv_mv2_kjc}
    {#store-grc-rn-vendor-risk-mgmt-ecovadis__ul_edk_mv2_kjc}

Version 21.1.1 - December 2025 (Zurich)
:   Changed: Changes have been made to enable sn_vdr_risk_asmt.vendor_risk_admin to perform the necessary integration configurations, eliminating the need for a system administrator to do it.

Version 20.1.1 - May 2025
:   Changed: Matching criteria has been updated to improve identification of a third-party from risk score providers score feed.{#store-grc-rn-vendor-risk-mgmt-ecovadis__latest-store-grc-rn-vendor-risk-mgmt-ecovadis}
{#store-grc-rn-vendor-risk-mgmt-ecovadis__latest-store-grc-rn-vendor-risk-mgmt-ecovadis}

Version 18.1.0 - June 2024
:   Fixed: Removed possible script injection vulnerability in an encoded query script.

Version 15.0.3 - August 2022
:   Fixed: Added additional security checks to the EcoVadis API call

Version 14.1.2 - March 2022
:   New: Added ability to request an EcoVadis rating for a vendor from within ServiceNow

Version 13.0.1 - December 2021
:   The ServiceNow Vendor Risk Management application helps customers manage their third party risk management (TPRM) programs across a broad number of risk domains. Environmental, Social, and Goverance (ESG) is one of those
    risk domains that may necessitate the need to import information from content providers such as EcoVadis.