--- title: "ServiceNow Vulnerability" slug: "servicenow-vulnerability" updated: 2025-03-18T20:46:01Z published: 2025-03-18T20:46:01Z canonical: "docs.databee.buzz/servicenow-vulnerability" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt > Use this file to discover all available pages before exploring further. # ServiceNow Vulnerability The ServiceNow Vulnerability Management allows you to identify, prioritize, and respond to software issues and misconfigurations that could be exploited by attackers. For more information refer to the [ServiceNow’s official documentation](https://www.servicenow.com/products/vulnerability-response.html#benefits). **Integration Method:** API **Tables**: Vulnerability Finding Class (2002) This integration supports the following events. | **Event** | **Description** | | --- | --- | | Vulnerable Items | Retrieve the list of the vulnerable items. | This integration supports the following versions. | ServiceNow Version Tested | ServiceNow Vancouver | | --- | --- | | ServiceNow API version | v2.0 | ## Prerequisites - The user should have access to the ServiceNow Vulnerability Admin privileges for creating an OAuth API endpoint for external clients. - The user should have access to the DataBee console. ## Configuration Overview 1. Generate API credentials on the ServiceNow console with the required user roles. 1. [Create OAuth client application](/user-manual/docs/servicenow-vulnerability#create-oauth-client-application). 2. [Create user](/user-manual/docs/servicenow-vulnerability#create-user). 3. [Assign roles to user](/user-manual/docs/servicenow-vulnerability#assign-roles-to-user). 2. Add the [ServiceNow data feed](/user-manual/docs/servicenow-vulnerability#databee-configuration) integration in the DataBee console with the required API credentials. | **DataBee Parameter** | **ServiceNow Parameter** | | --- | --- | | Client Key | Client ID | | Client Secret | Client Secret | | Username | User ID | | Password | Password | | Token URL: | ServiceNow Instance | | API URL : | ServiceNow Instance | ## ServiceNow Configuration The scope mechanism limits an application request. ServiceNow platform supports authentication scopes to allow admins to limit access of an OAuth client application to a specific REST API. ### Create OAuth client application 1. Get the ServiceNow instance from the URL as highlighted below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-26qrqik6.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 2. Navigate to **All.** 1. In the search bar, enter **System OAuth.** 2. Navigate to **System OAuth** > **Application Registry**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-uxe0496p.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 3. Click on the **New** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-a9zhymct.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 4. On the Interceptor page, click **Create an OAuth API endpoint for external clients.** ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-9mvdrsun.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 5. Fill in the required details in the form: 1. Name: enter a unique name for OAuth client application. 2. Client ID: automatically generated by the ServiceNow OAuth server. 3. Client Secret: enter Client secret for the OAuth application or leave empty for auto generation. Copy the **Client ID** for later use. 6. Click on the **Submit** button. ![Inserting image...](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-j2f497fc.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 7. Select the Application created in the previous step from the Application Registries list. ![Inserting image...](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-jrlnm5o7.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 8. Click on **Lock** icon then save the **Client Secret** for later user. ![Inserting image...](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-4wek74l7.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) | Name | Unique Name that identifies the application | | --- | --- | | Client ID | This is auto generated by the instance and is used in DataBee. | | Client Secret | This is auto generated by the instance and is used in DataBee. | | Refresh Token Lifespan | 8,640,000 seconds (100 days) & can be increased. | | Access Token Lifespan | 1800 seconds (30 Minutes) & can be increased. | ### Create User 1. Navigate to **All**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-3nsphq0j.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 1. In the search bar, enter **User Administration.** 2. Navigate to **User Administration** > **Users**. 2. Click on the **New** button. The “Create User” form window will appear. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-en4mpykw.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 3. Fill in the required fields to create a user: The user must be active and not locked out to allow the instance to generate an access token for OAuth. Copy the **User ID** for later use. Click the **Submit** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-5hb6j2we.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 1. User ID: enter a unique username. 2. First Name: enter the user's first name. 3. Last Name: enter the user's last name. 4. Time Zone: set to GMT/UTC to ensure the API response includes GMT/UTC dates. 5. Date Format: set to System (yyyy-MM-dd). 6. Active: ensure the checkbox is selected. 7. Locked Out: ensure the checkbox is not selected. 4. Search username for the ‘User ID’ created in the previous step and click on it. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-m8g64bgl.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 5. Click on the **Set Password** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-sxibsc2n.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 6. Click on the **Generate** button and copy the password for later use. 1. Click on the **Save Password** button. 2. Click on the **Close** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-eb0mi6cn.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) ### Assign roles to user 1. Go to **Roles** tab and click on **Edit** to assign roles to user. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-wzasvnyl.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 2. In the search bar: 1. Enter **"sn_vul.read_all"** and select it. Click the **Add** button. 2. Click the **Save** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-oiare4jp.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) ## DataBee Configuration 1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Feed** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-f5ax8ov7.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 2. Search for **Servicenow Vulnerability** and click it as shown below. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-916nv3xp.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-js0vlhd0.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 4. Enter feed contact information and click **Next**. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-hnairm3m.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) 5. In the configuration page, confirm the following: ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/servicenow-vulnerability-mar2025-image-zw57et1z.png?sv=2026-02-06&spr=https&st=2026-10-30T12%3A22%3A05Z&se=2026-10-30T13%3A22%3A05Z&sr=c&sp=r&sig=5HWPESsDGngTQFzK5x%2BFEVVWenHsbMuG%2BJ30vixVEeo%3D) - API Base URL: replace with your ServiceNow Instance. - Authorization Method: OAuth2 - Username: paste the **User ID**. - Password: paste the **Password**. - Client Key: paste the **Client ID** generated earlier in the ServiceNow Platform. - Client Secret: paste the **Client Secret** generated earlier in the ServiceNow Platform. - Token URL: replace with your ServiceNow Instance. - Event Types: preselected for all the event types that integration pulls. 6. Click **Submit**. ## Troubleshooting Tips - Ensure the client key, client secret, instance, username and password are pasted correctly. Since you cannot view the client key and secret after the 1st time, re-create the creds, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed. - Make sure the required user role is assigned.