| \n\nSelect security tag\n\n | \n\n[Security tag](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/create-class-group-and-tags.md) to add metadata to the record or identify who should have access to this security incident record. This field appears only after the vulnerable item has been saved.\n\n |
| \n\nNumber\n\n | \n\nAutomatically generated vulnerable item number for this record.\n\n |
| \n\nSource\n\n | \n\nScanner that found this vulnerable item.Starting with v26.1.4 of Vulnerability Response, the Source field is read-only and can't be edited.\n\n |
| \n\nRisk rating\n\n | \n\nQuantified **Risk Score** separating vulnerable items into Critical, High, Medium, Low, and None. For more information on risk ratings, see [Vulnerability Response calculators and vulnerability calculator rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vuln-calculators-rules.md).**Note:** This base **Risk rating** isn’t the same as the Solution record **Risk rating.**\n\n |
| \n\nRisk score\n\n | \n\nCalculated amount of risk the vulnerable item poses to your environment.\n\n**Note:** This base **Risk score** isn’t the same as the Solution record **Risk score.**\n\n For more information, see [Vulnerability Response calculators and vulnerability calculator rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vuln-calculators-rules.md).\n\n |
| \n\nVulnerability\n\n | \n\nID of the vulnerability associated with this vulnerable item.\n\n |
| \n\nConfiguration item\n\n | \n\nAffected asset.\n\n |
| \n\nState\n\n | \n\nThis field defaults to **Open**, but you can change it to **Under Investigation** if the vulnerability is ready for immediate remediation.\n\n |
| \n\nUntil date for risk reduction\n\n | \n\nDate on which compensatory controls applied to the vulnerable item expire.**Note:** This field appears only when the Original risk score value is available.\n\n |
| \n\nAssignment group\n\n | \n\nGroup selected to work on this remediation task.\n\n |
| \n\nAssigned to\n\n | \n\nIndividual from the selected assignment group that works on this vulnerability.\n\n |
| \n\nCreated\n\n | \n\nDate this vulnerable item was created in your instance.\n\n |
| \n\nLast opened\n\n | \n\nDate the vulnerable item was most recently opened in your instance. Initially, this is the same as the creation date of the vulnerable item, however, if it was closed, then reopened the Last opened date contains the date and time reopened.\n\n |
| \n\nUpdated\n\n | \n\nDate of the last scan.\n\n |
| \n\nAge\n\n | \n\nDuration for which the VI has been active since the date it was last opened. If the VI is closed, the value of the Age field is set to zero.For more information on the Age field, see [Vulnerable item age calculation and display](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-vi-calcVI-age.md). For more information on how to customize the calculation of Age duration, see the [KB1703270](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1703270) article.\n\n |
| \n\n**Vulnerability**\n\n |
| \n\nSummary\n\n | \n\nDescription of the vulnerability.\n\n |
| \n\nSeverity\n\n | \n\nNormalized degree of severity of this vulnerability. Severity maps are provided for NVD and with ServiceNow third-party integrations. For more information on creating or adjusting severity maps, see [Create a Vulnerability Response severity map](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/create-severity-map.md).\n\n |
| \n\nVulnerability score \\(v3\\)\n\n | \n\nCVSS v3 score.\n\n |
| \n\nVulnerability score \\(v2\\)\n\n | \n\nCVSS v2 score.\n\n |
| \n\nExploit exists\n\n | \n\nYes, if at least one exploit is associated with the vulnerabilities associated with this vulnerable item.\n\n |
| \n\nExploit attack vector\n\n | \n\nMost vulnerable attack vector of the exploits for the vulnerabilities associated with this vulnerable item.\n\n |
| \n\nExploit skill level\n\n | \n\nLowest skill level required to exploit the vulnerabilities associated with this vulnerable item.\n\n |
| \n\nDate published\n\n | \n\nDate the vulnerability was published.\n\n |
| \n\nLast modified\n\n | \n\nDate the vulnerability was last modified.\n\n |
| \n\nThreat\n\n | \n\nRelevant information about the threat. Pulled from the vulnerable entry record.**Note:** Any changes made here update the vulnerable entry record.\n\n |
| \n\nRemediation notes\n\n | \n\nRelevant solution to the threat, pulled from the vulnerable entry record.\n\n |
| \n\n**Remediation** Available only with Vulnerability Solution Management.\n\n |
| \n\nPreferred solution\n\n | \n\nPreferred solution imported from the vulnerability record. **Note:** Any manual changes made here don’t change the vulnerability record and remain unchanged on the VI upon subsequent imports.\n\n |
| \n\nSummary\n\n | \n\nImported Summary from the solution record.\n\n |
| \n\nSolution type\n\n | \n\nPotential or Preferred solution.\n\n |
| \n\n**Initial Detection**\n\n |
| \n\nDNS name\n\n | \n\nName of the Domain Name Service name. If a CI isn’t provided, this field is used to look up a matching CI, if one exists.\n\n |
| \n\nNetBIOS name\n\n | \n\nName of the NetBIOS. If a CI isn’t provided, this field is used to look up a matching CI, if one exists.\n\n |
| \n\nIP Address\n\n | \n\nIPv4 or IPv6 address. If a CI isn’t provided, this field is used to look up a matching CI, if one exists.\n\n |
| \n\nPort\n\n | \n\nAddress of the port\n\n |
| \n\nProtocol\n\n | \n\nName of the protocol.\n\n |
| \n\nSSL\n\n | \n\nWhether SSL encryption is used or not.\n\n |
| \n\n**Detections**\n\n |
| \n\nStatus\n\n | \n\nState of the detection.\n\n |
| \n\nFirst found\n\n | \n\nDate the third-party source first found the detection on this asset.\n\n |
| \n\nLast found\n\n | \n\nDate the third-party source last found the detection on this asset.\n\n |
| \n\nDNS name\n\n | \n\nName of the Domain Name Service name. If a CI isn’t provided, this field is used to look up a matching CI, if one exists.\n\n |
| \n\nNetBIOS name\n\n | \n\nName of the NetBIOS. If a CI isn’t provided, this field is used to look up a matching CI, if one exists.\n\n |
| \n\nIP Address\n\n | \n\nIPv4 or IPv6 address. If a CI isn’t provided, this field is used to look up a matching CI, if one exists.\n\n |
| \n\nPort\n\n | \n\nAddress of the port\n\n |
| \n\nProtocol\n\n | \n\nName of the protocol.\n\n |
| \n\nSSL\n\n | \n\nWhether SSL encryption is used or not.\n\n |
| \n\nTimes found\n\n | \n\nNumber of times this vulnerability has been detected on this asset by the third-party source.\n\n |
| \n\nIntegration run\n\n | \n\nIntegration run that imported the detection.\n\n |
| \n\n**Close** Available once the vulnerable item has been remediated and closed. Items in this section are read-only.\n\n |
| \n\nClosed by\n\n | \n\nWho closed the vulnerable item.\n\n |
| \n\nClosed\n\n | \n\nDate the vulnerable item was closed.\n\n |
| \n\nClose notes\n\n | \n\nInformation included in the closure.\n\n |
| \n\nAge closed\n\n | \n\nTime period after which the VI was closed. If the VI is reopened, the value of the Age closed field is set to zero.For more information on how the Age closed field, see [Vulnerable item age calculation and display](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-vi-calcVI-age.md). For more information on how to customize the calculation of Age closed duration, see the [KB1703270](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1703270) article.\n\n |
| \n\n**Notes**\n\n |
| \n\nAdditional comments/Work notes\n\n | \n\nAny relevant information. Select the check box to add Additional comments.Starting with Vulnerability Response v20.0, you can add work notes in the Notes section for a deferred vulnerable item.\n\n |
| \n\nActivity\n\n | \n\nOnly appears when a work note has been created.\n\n |
| \n\n**Related Links**\n\n |
| \n\nCalculate Risk Score\n\n | \n\nWhen either the **Vulnerability Severity** or **Risk Score** calculators is enabled, the **Risk Score** field is updated.\n\n |
\n