Create Vulnerability Response vulnerable items

---
title: Create Vulnerability Response vulnerable items
description: Multiple methods create vulnerable items \(VI\). Most commonly, an integration to a vulnerability scanner is installed and configured to import results nightly. There are cases, like physical security vulnerabilities, when you might prefer to manually add vulnerable item records.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response/t\_CreateVulnerableItems.html
release: brazil
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 2
breadcrumb: [Manage individual vulnerable items manually, Vulnerability Response remediation overview, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Create Vulnerability Response vulnerable items

Multiple methods create vulnerable items \(VI\). Most commonly, an integration to a vulnerability scanner is installed and configured to import results nightly. There are cases, like physical security vulnerabilities, when you might prefer to manually add vulnerable item records.

## Before you begin

Role required: sn\_vul.vulnerability\_write

## About this task

VIs that you create manually, and automatically-created VIs are automatically added and removed from remediation tasks by remediation task rules and group conditions.

## Procedure

1.  Navigate to **All** > **Vulnerability Response** > **Vulnerable Items**.

2.  Select a category to open the list.

3.  Click **New**.

4.  Fill in the fields on the form, as appropriate.

    For information on the vulnerable items fields see, [Vulnerability Response vulnerable item form fields](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/vulnerable-item-fields.md).

5.  Right-click in the form header and click **Save**.

    The remediation task rules evaluate the vulnerable item and add it to an existing task or creates a new task. If the evaluation fails, then the vulnerable item is added to **Ungrouped Vulnerable Items** list.

    When you save a new vulnerable item, all the [enabled calculators](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/vuln-calculators-rules.md) run.

    **Note:** Only one calculator per **Target field** is allowed to be active at a time. When you activate one, any others with the same **Target field** are deactivated.

6.  You can click any of the related lists to view additional information.

    You can use the Related Link, **Scan for Vulnerabilities** to manually trigger a ServiceNow® -initiated scan. For information on how to configure a vulnerability scanner, see [Configure and manage Qualys vulnerability scanners and scans](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/advanced-modifications.md).

    For a Qualys Vulnerability Integration, a default scanner is pre-installed in the **Vulnerability Scanners** module. This scanner is deactivated by default. Select the **Active** and **Default** check boxes to activate the Qualys scanner to work using the **Scan for Vulnerabilities** related link on the remediation task and vulnerable item forms.

    The following editing and remediation options become available from the header bar:

    -   Update: Saves updates to the form.
    -   Create Security Incident: Creates a security incident.
    -   Close: Closes the item. If all items in its group are closed, the remediation task automatically closes.
    -   Request Exception: Submits a request to defer an item.
    -   Resolve: Resolves the item.
    -   Delete: Removes the vulnerable item.

**Related topics**  


[Edit vulnerable items in bulk in Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/bulk-edit-vis.md)