---
title: Create a vulnerability assessment record
description: Create assessment records for vulnerabilities of interest. After you create the assessment, you can initiate initial risk assessment, manually update the record, and calculate the risk score automatically.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response-workspaces/create-vuln-assessment.html
release: australia
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 2
keywords: [Create a vulnerability assessment record]
breadcrumb: [Exploring vulnerability assessment, Explore the Vulnerability Assessment Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Create a vulnerability assessment record

Create assessment records for vulnerabilities of interest. After you create the assessment, you can initiate initial risk assessment, manually update the record, and calculate the risk score automatically.

## Before you begin

You need to be part of the base system Vulnerability Assessment Event Manager assignment group to be able to perform the tasks associated with vulnerability assessment. Role required: sn\_vul\_analyst.vul\_event\_manager

## About this task

You can create a vulnerability assessment record for vulnerabilities of interest either by associating the event record to a primary CVE or to an affected product.

## Procedure

1.  Navigate to **All** > **Workspaces** > **Vulnerability Assessment Workspace**.

2.  Select the **Vulnerability Assessment** icon.

3.  Select **New**.

4.  Enter an appropriate title in the **Title** field.

5.  Select a primary CVE to associate with the new assessment record from the **Primary CVE** field.

    **Note:** All the preliminary details on the assessment record are populated based on the product that you select or create or the primary CVE that you associate with the record.

6.  Set a CI filter to narrow the configuration items collected during assessment.

    **Note:**

    -   When the assessment runs, only CIs that match the filter conditions are collected. If no CI filter is set, all CIs related to the vulnerability or affected products are collected.
    -   You can also add or modify the CI filter after the record is created. For more information, see [Modify the vulnerability assessment record](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response-workspaces/modify-vuln-assessment-record.md).
7.  Select **Submit**.

    The vulnerability assessment record with the title you had entered is created and displays in a new vulnerability assessment tab. By default, the vulnerability assessment record displays in the **Details** tab.

    **Note:** By default, the details of the primary CVE associated/ mapped are displayed.

    -   If no primary CVE is selected during the vulnerability assessment event record creation, a default record is created.
    -   If the primary CVE has associated CVEs then the related CVEs are populated in the **Vulnerability Entries** tab. You can add more associated CVEs from the **Vulnerability Entries** tab.
8.  Navigate to the **Affected Products** tab.

    1.  Select **New**.

    2.  On the form, fill in the fields.

<table id="table_ixb_mxc_cyb"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Publisher

</td><td>

Publisher of the software.This is a mandatory field.

</td></tr><tr><td>

Product

</td><td>

Product name of the software.This is a mandatory field.

</td></tr><tr><td>

Version

</td><td>

Version of the software product.

</td></tr><tr><td>

Edition

</td><td>

Edition of the software.

</td></tr></tbody>
</table>        **Note:** If you try to add vulnerability for software that exists in the table with the status 'false', a duplicate record is not created. The status of the existing software is updated to 'true'.

    3.  Select **OK**.

9.  Select **Save**.