Ungrouped Vulnerability Response vulnerable items

concept australia Updated Sep 10, 2026 2 min read ungrouped-vul-items.md

Vulnerable items are automatically assigned to a remediation task when they are imported. However, sometimes, if a vulnerable item (VI) is created manually, for example, the VI can become an orphan. The Ungrouped vulnerable item module lists those vulnerable items without a group.

Note: Integration automated processes do not create orphans, so this use case is expected to be small.

Being ungrouped occurs if a vulnerable item was created without a vulnerability, or there is no remediation task rule that assigns the VI to a group.

In that case, review the list of ungrouped vulnerable items by navigating to All > Vulnerability Response > Vulnerable items > Ungrouped.

After review, your choices are as follows:

You can Create or edit Vulnerability Response remediation task rules to catch any items that appear on this list.
You can Manually create a remediation task in Vulnerability Response and manually add items from this list to the group or define a condition that matches these items.
You can open an existing remediation task and add any relevant vulnerable items to the group as long as it is in the Open or Under Investigation state.

Note: Manually added vulnerable items are not automatically removed from remediation tasks by remediation task rules or group conditions.

For more information on how remediation tasks and task rules behave, see Vulnerability Response remediation tasks and remediation task rules overview.

35 lines · 3.0 KB Wrap lines

---
title: Ungrouped Vulnerability Response vulnerable items
description: Vulnerable items are automatically assigned to a remediation task when they are imported. However, sometimes, if a vulnerable item \(VI\) is created manually, for example, the VI can become an orphan. The Ungrouped vulnerable item module lists those vulnerable items without a group.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/ungrouped-vul-items.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Triage vulnerabilities automatically, Vulnerability Response remediation overview, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Ungrouped Vulnerability Response vulnerable items

Vulnerable items are automatically assigned to a remediation task when they are imported. However, sometimes, if a vulnerable item \(VI\) is created manually, for example, the VI can become an orphan. The **Ungrouped** vulnerable item module lists those vulnerable items without a group.

**Note:** Integration automated processes do not create orphans, so this use case is expected to be small.

Being ungrouped occurs if a vulnerable item was created without a vulnerability, or there is no remediation task rule that assigns the VI to a group.

In that case, review the list of ungrouped vulnerable items by navigating to **All** &gt; **Vulnerability Response** &gt; **Vulnerable items** &gt; **Ungrouped**.

After review, your choices are as follows:

-   You can [Create or edit Vulnerability Response remediation task rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/create-vul-group-rules.md) to catch any items that appear on this list.
-   You can [Manually create a remediation task in Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/create-vulnerability-group.md) and manually add items from this list to the group or define a condition that matches these items.
-   You can open an existing remediation task and [add any relevant vulnerable items to the group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/add-vul-item-to-group.md) as long as it is in the Open or Under Investigation state.

**Note:** Manually added vulnerable items are not automatically removed from remediation tasks by remediation task rules or group conditions.

For more information on how remediation tasks and task rules behave, see [Vulnerability Response remediation tasks and remediation task rules overview](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vulnerability-groups.md).