I had to deal with the same requirement.  You do not want to add a BR to the vulnerable item table.  Instead, create a scripted scheduled job that runs each AM to review all VITs updated yesterday, that are open, to determine if there is an associated exception so you can update accordingly.  This approach succeeded.

Why do you say no business rules?

Hi,

This is how I solved this for a few large customers:

https://community.servicenow.com/community?id=view_idea&sysparm_idea_id=3ab7c5cc1bbec150d018c8ca234bcb7d&sysparm_idea_table=x_snc_com_ideation_idea&sysparm_module_id=enhancement_requests

Hello,

the link you have provided is not working, do you have any other link that would work?

appreciate it

View Idea Page - Idea Portal (servicenow.com)