question Not able to understand the "Show duplicate VIs" functionality for a Remediation task in VR in Developer forum

Not able to understand the "Show duplicate VIs" functionality for a Remediation task in VR

Devi12 — Thu, 24 Nov 2022 13:43:24 GMT

Hi,

Recently we upgraded from Rome to Tokyo. We implemented Vulnerability Response previously. In VR I found a new button "Show Duplicate VIs" for a remediation task. In Documents I found that it will shows duplicate Vulnerable items. But when I clicked on it, it is asking for proceed or cancel confirmation. If click on proceed, displaying some information "Finding duplicates... View status. This may take time, depending on the number of VIs". So I clicked on View status, showing as shown in below fig.

But I didn't see any duplicate VIs existing. Even I didn't get any update like these many duplicate records found.

Where I can find the duplicate records found?

Re: Not able to understand the "Show duplicate VIs" functionality for a Remediation task i

Devi12 — Fri, 25 Nov 2022 07:44:30 GMT

Hi All,

Has anyone any thoughts on this?

Thanks

Re: Not able to understand the "Show duplicate VIs" functionality for a Remediation task i

Community Alums — Fri, 25 Nov 2022 08:13:56 GMT

Hi,

Duplicate entries are only shown when the combination of vulnerabilities is created using CVEs. For more information, see Vulnerability Response remediation task and vulnerable item states.

Check out the below links:

https://docs.servicenow.com/bundle/tokyo-security-management/page/product/vulnerability-response/concept/correlate-vis-from-diff-scanners.html

https://docs.servicenow.com/bundle/tokyo-security-management/page/product/vulnerability-response/concept/automate-workflows-for-duplicate-vulnerabilities.html

Re: Not able to understand the "Show duplicate VIs" functionality for a Remediation task i

Devi12 — Fri, 25 Nov 2022 10:23:14 GMT

Hi Bhavani,

I have gone through these docs. Duplicate entries are only shown when the combination of vulnerabilities is created using CVEs means only the vulnerabilities created using CVEs can display duplicates. But in our instance we are using Tenable, so the vulnerability is creating using CVEs only. But it is not working as expected.