Assign a priority and exposure level to the vulnerability assessment record

task australia Updated Sep 10, 2026 1 min read assign-priority-exposure-level-vr-va-ws.md

Raw file servicenow.com

Manually assign priority and exposure level to the vulnerability assessment record.

Before you begin

Role required: sn_vul_analyst.vul_event_manager

Procedure

Navigate to Workspaces > Vulnerability Assessment workspace.
Select a vulnerability assessment record.
Navigate to Risk Attributes in the Details tab.
Select a Priority from the list of options.
Select an Exposure Level from the list of options.
Select Save.

Result

When you update the priority of a vulnerability assessment (VA), the system also updates the priority of all associated vulnerable items (VITs) and application vulnerable items (AVITs).

If a VIT or AVIT is linked to multiple VA records, the system assigns the highest severity (lowest priority number) from all linked assessments.

Example

If a VIT is associated with three VA records with priorities 2, 3, and 4, the system sets the VIT priority to 2 (High).

Note: This priority roll-down applies only to VITs and AVITs created through SAM NVD assessments or the Vulnerability Assessment Workspace (Source = ServiceNow VR). Vulnerable items imported from third-party scanners retain the priority determined by the scanner integration’s severity mapping.

Keywords Assign priority to the vulnerability assessment recordExposure level to the vulnerability assessment record

51 lines · 2.2 KB Wrap lines

---
title: Assign a priority and exposure level to the vulnerability assessment record
description: Manually assign priority and exposure level to the vulnerability assessment record.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response-workspaces/assign-priority-exposure-level-vr-va-ws.html
release: australia
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
keywords: [Assign priority to the vulnerability assessment record, Exposure level to the vulnerability assessment record]
breadcrumb: [Perform an assessment, Exploring vulnerability assessment, Explore the Vulnerability Assessment Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Assign a priority and exposure level to the vulnerability assessment record

Manually assign priority and exposure level to the vulnerability assessment record.

## Before you begin

Role required: sn\_vul\_analyst.vul\_event\_manager

## Procedure

1. Navigate to **Workspaces** &gt; **Vulnerability Assessment workspace**.

2. Select a vulnerability assessment record.

3. Navigate to **Risk Attributes** in the **Details** tab.

4. Select a **Priority** from the list of options.

5. Select an **Exposure Level** from the list of options.

6. Select **Save**.

## Result

When you update the priority of a vulnerability assessment \(VA\), the system also updates the priority of all associated vulnerable items \(VITs\) and application vulnerable items \(AVITs\).

If a VIT or AVIT is linked to multiple VA records, the system assigns the highest severity \(lowest priority number\) from all linked assessments.

## Example

If a VIT is associated with three VA records with priorities 2, 3, and 4, the system sets the VIT priority to 2 \(High\).

**Note:** This priority roll-down applies only to VITs and AVITs created through SAM NVD assessments or the Vulnerability Assessment Workspace \(Source = ServiceNow VR\). Vulnerable items imported from third-party scanners retain the priority determined by the scanner integration’s severity mapping.