Container Vulnerability Response
The ServiceNow® Container Vulnerability Response application imports container vulnerable items (CVITs) and according to the rules enables you to remediate container vulnerabilities. Vulnerability data is pulled from internal and external sources, such as the National Vulnerability Database (NVD) or third-party integrations.
Request apps on the Store
Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
## BenefitsThe Container Vulnerability Response application provides the following benefits:
- Integrates with third-party container security products, like Prisma Cloud Compute from Palo Alto Networks.
- Imports vulnerability data for the images that are deployed to runtime, and enriches the vulnerability data with runtime contextual information (hosts, Kubernetes clusters, services, and namespaces).
- Provides a list of the references created from vulnerabilities to the relevant Kubernetes entities in the Configuration Management Database (CMDB) using ServiceNow Kubernetes Discovery.
- Offers a comprehensive reporting dashboard, providing insights into the vulnerability and remediation trends.
Key features
The Container Vulnerability Response application manages vulnerabilities detected in the containers. It provides the following features:
- Point to source Docker Image from CVITs instead of running containers.
- Configure granularity of CVITs to track at image, Kubernetes cluster, namespace, or service level.
- Track new image versions to identify fixed vulnerabilities. Any vulnerabilities reported in older versions are automatically resolved in ServiceNow when new image versions are deployed at runtime.
- Track CVITs in Base images separately from Application images to enable independent remediation.
- Raise exception requests or false positive requests, which can be reviewed through a multi-level approver process.
- Define exception rules to defer CVITs automatically.
What's new
To learn more about what's new and what's changed in Brazil, see the Brazil release notes.
Get started
- For an overview about Security Operations in your ServiceNow AI Platform instance, see Understanding Security Operations.
- For information about all the Security Operations applications available for download from the ServiceNow Store, see Security Operations and the ServiceNow Store.
--- title: Container Vulnerability Response description: The ServiceNow Container Vulnerability Response application imports container vulnerable items \(CVITs\) and according to the rules enables you to remediate container vulnerabilities. Vulnerability data is pulled from internal and external sources, such as the National Vulnerability Database \(NVD\) or third-party integrations. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/container-vulnerability-response/cvr-landing.html release: australia product: Container Vulnerability Response classification: container-vulnerability-response topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 4 breadcrumb: [Unified Security Exposure Management, Security Operations] --- # Container Vulnerability Response The ServiceNow® Container Vulnerability Response application imports container vulnerable items \(CVITs\) and according to the rules enables you to remediate container vulnerabilities. Vulnerability data is pulled from internal and external sources, such as the National Vulnerability Database \(NVD\) or third-party integrations. ## Request apps on the Store Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html). <table id="table_myz_gt3_b5c" class="nav-card"><tbody><tr><td> [Explore \[Omitted image "bus-explore.svg"\] Alt text: Learn about Container Vulnerability Response concepts and features.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/exploring-cvr.md) </td><td> [Configure \[Omitted image "bus-sdlc.svg"\] Alt text: Configure Container Vulnerability Response.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/configure-cvr.md) </td><td> [Integrate \[Omitted image "bus-integration-and-apis.svg"\] Alt text: Extend Container Vulnerability Response by integrating with other applications.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/integrate-cvr.md) </td></tr><tr><td> [Use the Vulnerability Response Workspaces \[Omitted image "bus-agent-workspace-1.svg"\] Alt text: Learn how to monitor, manage and remediate CVITs in the Vulnerability Manager, IT Remediation, and Vulnerability Assessment Workspaces.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/vr-wkspace-overview-v16.md) </td><td> [Remediate \[Omitted image "bus-optimize-manage.svg"\] Alt text: Learn how to remediate container vulnerabilities.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/remediate-cvr.md) </td><td> [Analytics & Reporting \[Omitted image "bus-infographic.svg"\] Alt text: View Container Vulnerability Response analytics](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/cvr-content-pack.md) </td></tr><tr><td> [Reference \[Omitted image "bus-learn.svg"\] Alt text: Get details about Container Vulnerability Response components like fields, tables and properties.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/container-vulnerability-response/cvr-reference.md) </td><td> [Upgrade Container Vulnerability Response to USEM \[Omitted image "bus-switch.svg"\] Alt text: Upgrade Container Vulnerability Response applications to Unified Security Exposure Management.](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/migrating-to-usem.md) </td><td> </td></tr></tbody> </table>## Benefits The Container Vulnerability Response application provides the following benefits: - Integrates with third-party container security products, like Prisma Cloud Compute from Palo Alto Networks. - Imports vulnerability data for the images that are deployed to runtime, and enriches the vulnerability data with runtime contextual information \(hosts, Kubernetes clusters, services, and namespaces\). - Provides a list of the references created from vulnerabilities to the relevant Kubernetes entities in the Configuration Management Database \(CMDB\) using ServiceNow Kubernetes Discovery. - Offers a comprehensive reporting dashboard, providing insights into the vulnerability and remediation trends. ## Key features The Container Vulnerability Response application manages vulnerabilities detected in the containers. It provides the following features: - Point to source Docker Image from CVITs instead of running containers. - Configure granularity of CVITs to track at image, Kubernetes cluster, namespace, or service level. - Track new image versions to identify fixed vulnerabilities. Any vulnerabilities reported in older versions are automatically resolved in ServiceNow when new image versions are deployed at runtime. - Track CVITs in Base images separately from Application images to enable independent remediation. - Raise exception requests or false positive requests, which can be reviewed through a multi-level approver process. - Define exception rules to defer CVITs automatically. ## What's new To learn more about what's new and what's changed in Brazil, see the Brazil release notes. ## Get started - For an overview about Security Operations in your ServiceNow AI Platform instance, see [Understanding Security Operations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/understanding-secops.md). - For information about all the Security Operations applications available for download from the ServiceNow Store, see [Security Operations and the ServiceNow Store](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/secops-and-store.md).
| title | Container Vulnerability Response |
| description | The ServiceNow Container Vulnerability Response application imports container vulnerable items \(CVITs\) and according to the rules enables you to remediate container vulnerabilities. Vulnerability data is pulled from internal and external sources, such as the National Vulnerability Database \(NVD\) or third-party integrations. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/container-vulnerability-response/cvr-landing.html |
| release | australia |
| product | Container Vulnerability Response |
| classification | container-vulnerability-response |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 4 |
| breadcrumb | Unified Security Exposure ManagementSecurity Operations |