Now Assist for Vulnerability Response (USEM): Recommend Solutions Skill Returns 0 VITs Processed

[sarah_bioni]

When running the Recommend Solutions skill on Remediation Task (VUL) records, the job sometimes returns 0 VITs processed and 0 solutions found, even though the remediation task contains multiple Vulnerable Items (VITs).

The Problem: The skill failed to process any VITs because the VITs or their associated vulnerabilities do not meet the required prerequisites.

Key Symptom: You click "Recommend Solutions" on a Remediation Task, but the solution job shows:

• VITs Processed: 0
• Solutions Found: 0

Root Cause

The Recommend Solutions skill has strict prerequisites for processing Vulnerable Items. A VIT is not processed if it fails to meet any of these conditions:

1. VIT State – Must be in one of these states:
   • Open
   • Under Investigation
   • Awaiting Implementation
   • In Review
    Will NOT be processed if: Deferred, Closed, or any other state.
2. CI and Vulnerability Fields – Both must be populated:
   • Configuration Item (CI) field must have a value
   • Vulnerability field must have a value
3. Associated Vulnerability Must Have a Solution. The vulnerability (CVE, QID) linked to the VIT must have:
   • At least one solution populated
   • That solution marked as "highest supersedence" (true)
   • Visible in the Solutions related list on the Vulnerability record

If even one VIT in the Remediation Task meets all three conditions, it will be processed. If none do, the result is 0 VITs processed and no solutions found.