What is the difference between "sn_vul_remediation_task" and "sn_vul_vulnerability" RT tables?

[MGanon]

What is the [sn_vul_rememdation_task] table?

I am trying to better understand Remediation Task functionality in Tokyo Vulnerability Response. 

I understand Vulnerability Groups are now relabeled as Remediation Tasks

https://docs.servicenow.com/bundle/sandiego-security-management/page/product/vulnerability-response/...

The Tokyo documentation has gone a step further towards relabeling:
https://docs.servicenow.com/bundle/tokyo-security-management/page/product/vulnerability-response/tas...

I also cannot navigate to the table. Was it a bug that got released?

Why also does the [sn_vul_vulnerability] table not appear in a query of tables with Label = "Remediation Task?

[Amit Gujarathi]

Hi @MGanon ,

Hope you are doing fine.

In ServiceNow, "sn_vul_remediation_task" and "sn_vul_vulnerability" are two different database tables that are used to store information about vulnerabilities and the processes for addressing them.

1. sn_vul_remediation_task: The sn_vul_remediation_task table is used to store information about individual tasks that are related to vulnerability remediation. This may include tasks such as patching a vulnerable system, implementing a new security control, or conducting a vulnerability assessment.

2. sn_vul_vulnerability: The sn_vul_vulnerability table is used to store information about specific vulnerabilities that have been identified in an organization's systems and applications. This may include information such as the vulnerability's severity, the affected systems, and the remediation steps that have been taken to address the vulnerability.

In summary, the sn_vul_remediation_task table is used to store information about individual remediation tasks, while the sn_vul_vulnerability table is used to store information about specific vulnerabilities.

Please mark the reply correct if you find it helpful.

Regards,

Amit Gujarathi

[MGanon]

Your response generates more questions that answers. I am not able to navigate to the [sn_vul_rememdation_task] table, even directly through sn_vul_rememdation_task.list. Navigating either directly through sn_vul_vulnerability.list or Vulnerability Response > Remediation Tasks > ... brings me to the same list labeled Remediation Tasks. Opening an existing or creating a new remediation task uses the sn_vul_vulnerability table. These VR remediation tasks contain, just like legacy Vulnerability Groups, lists of Vulnerable Items, Task SLAs, and Change Requests.

Your description of the [sn_vul_remediation_task] table, to store information about individual tasks that are related to vulnerability remediation, sounds more like the affected task list associated to a Vulnerable Item record.

[Vanajan]

Do you know if its supposed to be 1 to 1 relationship,  sn_vul_remediation_task record to remediation task (sn_vul_vulnerability). I am seeing lot remediation task (sn_vul_vulnerability) assigned for a user but am not seeing that being reflected on the IT Remediation Workspace. The user has about 436 remediation task (sn_vul_vulnerability) and one one record (sn_vul_remediation_task ) shown on the IT Remediation Workspace.