---
title: Activate or deactivate CVEs for exposure assessment
description: For delta processing of a CVE, you can activate it, thus adding it to the active list of CVEs.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response-workspaces/vr-ws-activate-deactivate-cves.html
release: australia
product: Vulnerability Response Workspaces
classification: vulnerability-response-workspaces
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Exposure assessment by CVE, Exploring exposure assessment, Explore the Vulnerability Assessment Workspace, Vulnerability Response Workspaces, Unified Security Exposure Management, Security Operations]
---

# Activate or deactivate CVEs for exposure assessment

For delta processing of a CVE, you can activate it, thus adding it to the active list of CVEs.

## Before you begin

Role required: sn\_vul\_analyst.vul\_event\_manager

**Note:** Starting with version 4.0.1 of Vulnerability Exposure Assessment, if a Common Vulnerability Entry \(CVE\) has not been updated or had vulnerable items \(VITs\) created in the past 30 days, the exposure assessment record for that CVE is automatically marked as inactive. However, you can manually activate or deactivate these records. Additionally, the scheduled job **Check potential vulnerability exposure** runs continually to scan for such CVEs to designate them as inactive.

## Procedure

1.  Navigate to **Workspaces** > **Vulnerability Assessment Workspace** > **Exposure Assessment** > **Assess by CVE**.

2.  Select the required active CVEs and select the **Deactivate** option.

    The CVEs are deactivated.

    **Note:** To activate software, follow the same process and select the **Activate** option.

3.  Refresh the page to view the updated status \(false\) in the Active column.