What happens if a Vulnerable Item no longer matches the Exception Rule conditions?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-23-2024 06:16 PM - edited 05-23-2024 06:17 PM
There is an ongoing doubt to know what happens to a Vulnerable Item deferred by an exception rule if it gets updated by the system and no longer matches the initial conditions of the exception rule.
Following OOB does it get re-opened or what should happen in this case?
- Labels:
-
Vulnerability Response

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-23-2024 09:58 PM - edited 05-23-2024 09:59 PM
Based on the documentation, the VIT remains in Deferred state till the 'Deferred Until' date. After Deferred Until date, the VIT moves back to Open state.
Please mark this response as correct or helpful if it assisted you with your question.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-23-2024 10:06 PM
Hey @SanjivMeher
Hope below mentioned article helps you if yes mark it as helpful and accept it as solution.
https://www.servicenow.com/community/secops-forum/reopening-of-closed-vis-by-the-vr-system/m-p/13271...
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-23-2024 10:53 PM
Currently, we dont have the option to reapply the exception rules or when the VIT doesn't match the condition of an exception rule. Can you please raise this in the idea portal?