Request an extension for a deferred application vulnerable item in Application Vulnerability Response

task brazil Updated Sep 10, 2026 1 min read extend-defer-app-vul-item.md

Request an extension for a deferred application vulnerable item before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.

Before you begin

Role required: sn_vul.vulnerability_admin or sn_vul.admin (deprecated)

About this task

You can also request an extension from the Vulnerability Response Workspaces. For more information, see Request an extension for a deferred vulnerable item in the Vulnerability Manager workspace.

Procedure

Navigate to All > Application Vulnerability Response > Vulnerable Items.
Open a deferred application vulnerable item.
Select Request Extension.

Note: The Request Extension button is visible only when the state of the application vulnerable item is Deferred.
Fill in the fields on the form, as appropriate.

Field	Description
Extend Until	Select the date until when the deferred application vulnerable item must be extended for remediation.
Reason	Enter the reason for deferring the issue. Choices include: Awaiting maintenance window Fix unavailable Risk accepted Mitigating control in place Other
Additional information	Enter any other relevant information.

Field

Description

Extend Until

Select the date until when the deferred application vulnerable item must be extended for remediation.

Reason

Enter the reason for deferring the issue. Choices include:

Awaiting maintenance window
Fix unavailable
Risk accepted
Mitigating control in place
Other

Additional information

Enter any other relevant information.

5. Select **Request Approval**.

An email is triggered on submission of the request and subsequent action by the approver.

**Note:**

-   The request goes through two levels of approval.
-   If a deferred exception rule is extended again, the extend deferral count increases in the backend.

After the request is approved, the Until, Reason, and Deferral notes are updated.

Parent Topic:Requesting and approving an exception in Application Vulnerability Response

92 lines · 3.3 KB Wrap lines

---
title: Request an extension for a deferred application vulnerable item in Application Vulnerability Response
description: Request an extension for a deferred application vulnerable item before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/extend-defer-app-vul-item.html
release: brazil
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Requesting and approving an exception in Application Vulnerability Response, Exception Management in Application Vulnerability Response, Configure Application Vulnerability Response, Configure, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Request an extension for a deferred application vulnerable item in Application Vulnerability Response

Request an extension for a deferred application vulnerable item before it reaches its deferred until due date. As a remediation owner, you’re no longer required to wait until the deferred due date to make this request.

## Before you begin

Role required: sn\_vul.vulnerability\_admin or sn\_vul.admin \(deprecated\)

## About this task

You can also request an extension from the Vulnerability Response Workspaces. For more information, see [Request an extension for a deferred vulnerable item in the Vulnerability Manager workspace](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-manager-workspace/extend-defer-vul-item-ws.md).

## Procedure

1.  Navigate to **All** &gt; **Application Vulnerability Response** &gt; **Vulnerable Items**.

2.  Open a deferred application vulnerable item.

3.  Select **Request Extension**.

    **Note:** The Request Extension button is visible only when the state of the application vulnerable item is Deferred.

4.  Fill in the fields on the form, as appropriate.

<table id="table_s52_yvn_r6"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Extend Until

</td><td>

Select the date until when the deferred application vulnerable item must be extended for remediation.

</td></tr><tr><td>

Reason

</td><td>

Enter the reason for deferring the issue. Choices include:

-   Awaiting maintenance window
-   Fix unavailable
-   Risk accepted
-   Mitigating control in place
-   Other


</td></tr><tr><td>

Additional information

</td><td>

Enter any other relevant information.

</td></tr></tbody>
</table>5.  Select **Request Approval**.

    An email is triggered on submission of the request and subsequent action by the approver.

    **Note:**

    -   The request goes through two levels of approval.
    -   If a deferred exception rule is extended again, the extend deferral count increases in the backend.
6.  After the request is approved, the Until, Reason, and Deferral notes are updated.


**Parent Topic:**[Requesting and approving an exception in Application Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/application-vulnerability-response/avr-request-approve-exception.md)