---
title: Ungrouped Vulnerability Response vulnerable items
description: Vulnerable items are automatically assigned to a remediation task when they are imported. However, sometimes, if a vulnerable item \(VI\) is created manually, for example, the VI can become an orphan. The Ungrouped vulnerable item module lists those vulnerable items without a group.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/ungrouped-vul-items.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [Triage vulnerabilities automatically, Vulnerability Response remediation overview, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Ungrouped Vulnerability Response vulnerable items

Vulnerable items are automatically assigned to a remediation task when they are imported. However, sometimes, if a vulnerable item \(VI\) is created manually, for example, the VI can become an orphan. The **Ungrouped** vulnerable item module lists those vulnerable items without a group.

**Note:** Integration automated processes do not create orphans, so this use case is expected to be small.

Being ungrouped occurs if a vulnerable item was created without a vulnerability, or there is no remediation task rule that assigns the VI to a group.

In that case, review the list of ungrouped vulnerable items by navigating to **All** > **Vulnerability Response** > **Vulnerable items** > **Ungrouped**.

After review, your choices are as follows:

-   You can [Create or edit Vulnerability Response remediation task rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/create-vul-group-rules.md) to catch any items that appear on this list.
-   You can [Manually create a remediation task in Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/create-vulnerability-group.md) and manually add items from this list to the group or define a condition that matches these items.
-   You can open an existing remediation task and [add any relevant vulnerable items to the group](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/add-vul-item-to-group.md) as long as it is in the Open or Under Investigation state.

**Note:** Manually added vulnerable items are not automatically removed from remediation tasks by remediation task rules or group conditions.

For more information on how remediation tasks and task rules behave, see [Vulnerability Response remediation tasks and remediation task rules overview](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vulnerability-groups.md).