Assets - NVD Integration does not import vulnerabilities

[Przemysław Grzesiak]

I created importer using "Asset - NVD Integration" to import Vulnerabilities but unfortunately apart from End Point and Vulnerability Types no objects are imported, for every other "Entries in external source" in the result are equal to 0. I was trying with different start and end "Published range date" but to no effect. What may be the reason? Is NVD database empty?

NVD Integration Version: 2.0.4

Assets Version: 10.12.1-QR-0336

[Marc - Devoteam]

HI @Przemysław Grzesiak 

Did you follow the instructions, did you request an API key from the NVD side?

Which JSM version are you running, if it's 11, you will need NVD version 3.

https://confluence.atlassian.com/servicemanagementserver/importing-nvd-data-into-assets-1528531084.html 

[Przemysław Grzesiak]

Did you follow the instructions, did you request an API key from the NVD side?

Yes, I entered API key.

Which JSM version are you running, if it's 11, you will need NVD version 3.

Jira Core 9.12.19 and JSM 5.12.19

[Marc - Devoteam]

Hi @Przemysław Grzesiak 

How did you set the Published Start Date, as format YYYY-MM-DD? This is mandatory.

Also there is no end date option.

[Przemysław Grzesiak]

I used several combinations, for example:

1. Start date: 1988-10-01, End Date 1990-01-01
2. Start date: 2025-01-01, End date EMPTY
3. Start date: 2025-07-01, End date EMPTY
4. Start date: 2025-09-01, End date EMPTY

Same result each time, End Point and Vulnerability Types are OK bot for other Object Types no entries found in External Source

[Marc - Devoteam]

Hi @Przemysław Grzesiak 

The only thing I can give you is to check the logs on what is happing when the import is done.

Logs should provide information.

It might be that the server running Jira can't reach the NVD source, firewall, etc, or any other blocking issues in your (company) network