Security Operations Common provides the shared foundational services, background job processing, and infrastructure that power the Vulnerability Response suite of applications. It handles core state management, item processing pipelines, and cross-application utilities to ensure reliable and scalable vulnerability operations.
Dependency for Vulnerability Response and Security Incident Response applications.
- Background Job State Rolldown — Ensures that state changes on Remediation Tasks are reliably propagated to all associated Vulnerable Items, even when the item count is large, using scalable background job processing.
- Scalable Item Processing Pipeline — Handles large volumes of vulnerable items through paginated processing with configurable thresholds, preventing timeouts and ensuring data consistency.
- SBOM Ingestion Processing — Supports parallel ingestion and processing of Software Bill of Materials (SBOM) data for improved performance at scale.
- Cross-application Shared Services — Provides common utilities and infrastructure shared across Vulnerability Response, Configuration Compliance, and related security applications.
Fixed
- Fixed an issue where retired configuration items (CIs) could be incorrectly associated with Security Incidents created from SIEM data ingestion.
- Fixed an issue where security capability execution flows could run all active capability implementations instead of only the ones specified.
- Improved upgrade performance for the Security Support Common plugin, reducing install time during instance upgrades.
- Resolved several packaging and translation issues in Security Support Common to improve localization coverage.
- Fixed a role-definition packaging issue in the Security Support Common plugin.
- Improved accessibility compliance across Security Support Common workspaces and forms.
Permissions and roles:
- Role required:
- System Admin (admin) or Vulnerability Admin (sn_vul.vulnerability_admin) for VR.
- Security Incident Administrator (sn_si.admin) for SIR.