---
sourceDocument: Store Version History Release Notes
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/store-release-notes

 Release :

    - store

ft:locale :

    - en-US

ft:publication_title :

    - Store Version History Release Notes

ft:clusterId :

    - rnst

bundleId :

    - rnst


---

# Vulnerability Emergency Response release notes

# Vulnerability Emergency Response release notes {#ariaid-title1}

Release version: Store  
Updated December 11, 2025  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Version history for the Vulnerability Emergency Response application on the ServiceNow Store.
Important:  
For details on system requirements and family compatibility, view the application listing on the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website.

## Version history

Version 3.0.1 - February 2024
:
    * Changed:
      * Consideration of secondary Common Vulnerabilities and Exposures (CVEs) for scanner ingested vulnerabilities during the assessment.
      * Major Security Incident Management (MSIM) link is displayed on the vulnerable items (VIT)/ application vulnerable items (AVIT) in the Vulnerability Response (VR) workspaces.
      * Assessment Vulnerabilities on CVEs are shown in the VR workspaces.
      * The auto-flush rule is shipped to delete all the related data for Vulnerability Assessment if was closed for 6 months. Earlier, it was shipped in the base system as inactive.
      {#store-secops-rn-vr-emergency-response__ul_trj_5wv_21c}
    * Fixed:
      * Unlinking Vulnerability Assessment from Major Security Incident workspace.
      * Fixed the Scanned Applications widget to show the count from all CVEs.
      * Minor updates and usability issues.
    {#store-secops-rn-vr-emergency-response__latest-store-secops-rn-vr-emergency-response}
{#store-secops-rn-vr-emergency-response__latest-store-secops-rn-vr-emergency-response}

Version 2.0.5 - December 2023
:   Fixed: The Vulnerability Assessment Calculators can be deleted only by the user with the sn_vul_analyst.read_risk_score_configuration role.

Version 2.0.3 - November 2023
:
    * New:
      * Vulnerability Crisis Management: A complete workflow to handle vulnerability crisis events with the following capabilities:
        * Identify vulnerable configuration items (CIs) by correlating critical vulnerabilities with software installations inventory from Software Asset Management (SAM), Software Bill of Materials Inventory (SBOM), scanner-reported vulnerabilities and Configuration Management Database (CMDB).
        * Generate vulnerable items for remediation based on assessment results, streamlining the remediation process.
        * Initiate a major security incident response, ensuring swift and coordinated action.
        * Engage and collaborate with teams across the organization, facilitating a unified response to vulnerabilities.
        * Provide regular status reports to affected teams, partner teams, and leadership, maintaining transparency throughout the crisis.
        {#store-secops-rn-vr-emergency-response__ul_gz5_1hb_fzb}
      * Exposure Assessment: Updated assessments with the normalized inventory of Software Asset Management (SAM).
      {#store-secops-rn-vr-emergency-response__ul_dy5_1hb_fzb}

Version 1.0.2 - October 2023
:
    * Fixed: Previously, the form view of records were not loading in the Vulnerability Manager and IT Remediation Owner Workspaces in the instances with the platform versions, Utah patch 0 - Utah patch 5. This issue has been fixed. The records will now load in form view in all the supported platform versions.

Version 1.0.1 - August 2023 (Vancouver)
:   New: The new Vulnerability Analyst workspace contains the Exposure Assessment module. It is used for:

    * Automatic assessments of CISA KEV
    * CVE or CPE-based assessment
    * Software-based (Vendor, Product,Version, and Edition) assessment for zero-day vulnerabilities
    {#store-secops-rn-vr-emergency-response__ul_x2x_tbx_hyb}