Skip to page contentSkip to chat
ServiceNow support
    • Community
      Ask questions, give advice, and connect with fellow ServiceNow professionals.
      Developer
      Build, test, and deploy applications
      Documentation
      Find detailed information about ServiceNow products, apps, features, and releases.
      Impact
      Accelerate ROI and amplify your expertise.
      Learning
      Build skills with instructor-led and online training.
      Partner
      Grow your business with promotions, news, and marketing tools
      ServiceNow
      Learn about ServiceNow products & solutions.
      Store
      Download certified apps and integrations that complement ServiceNow.
      Support
      Manage your instances, access self-help, and get technical support.
Is it possible to run "Exposure Assessment" in Vulnerability Response feature periodically possibly as a Scheduled Job? - Support and Troubleshooting
  • >
  • Knowledge Base
  • >
  • Support and Troubleshooting (Knowledge Base)
  • >
  • Is it possible to run "Exposure Assessment" in Vulnerability Response feature periodically possibly as a Scheduled Job?
KB0817489

Is it possible to run "Exposure Assessment" in Vulnerability Response feature periodically possibly as a Scheduled Job?


470 Views Last updated : Apr 8, 2024 public Copy Permalink
KB Summary by Now Assist

Issue

Is it possible to run "Exposure Assessment" in Vulnerability Response feature periodically possibly as a Scheduled Job?

Resolution

The Exposure Assessment feature is intended to run on-demand (zero-day vulnerability) for a particular asset with the option of choosing existing CVE or create new CVE if not already exists. It is not intended to run it periodically or schedule it.

This process has the below steps and requires some user inputs in each step, so it would be difficult to create a scheduled job for this.

1. Create a new exposure assessment with Publisher, Product, Version and Edition details.
2. Run Show Exposure.
3. Run 'Create Vulnerability Items' (VIs) action and provide either existing CVE or choose the option to create new CVE by providing details.

There are few challenges if you create a scheduled job for the above steps.
1. We should hard-code publisher, product and version details - that means you schedule it for particular Asset only, we can't schedule it for dynamic assets.
2. We should hard-code CVE details for the chosen Asset and only run create VIs for that particular Asset periodically, which does not make sense.

To achieve zero-day vulnerability on new vulnerabilities announced on NVD or other sources, we should run Exposure Assessment dynamically for that particular Asset.

We have below documentation on how to create an Exposure assessment and run it.

https://docs.servicenow.com/csh?topicname=vr_sw_expsure_task.html&version=latest



The world works with ServiceNow.

Sign in for more! There's more content available only to authenticated users Sign in for more!
Did this KB article help you?
Did this KB article help you?

How would you rate your Now Support digital experience?

*

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

Very unsatisfied

Unsatisfied

Neutral

Satisfied

Very satisfied

What can we improve? Please select all that apply.

What are we doing well? Please select all that apply.

Tell us more

*

Do you expect a response from this feedback?

  • Terms and conditions
  • Privacy statement
  • GDPR
  • Cookie policy
  • © 2025 ServiceNow. All rights reserved.