---
title: Vulnerability Response remediation task and vulnerable item states
description: With the Vulnerability Response application, you can use the state model to see the status of a remediation task, at any given time. Knowing how each state relates to and affects each other helps you to determine when and how to remediate your vulnerable items \(VIs\).
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/vulnerabillity-states.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [Exploring the Vulnerability Response application, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Vulnerability Response remediation task and vulnerable item states

With the Vulnerability Response application, you can use the state model to see the status of a remediation task, at any given time. Knowing how each state relates to and affects each other helps you to determine when and how to remediate your vulnerable items \(VIs\).

## Remediation task states

Complex use cases can sometimes result in a vulnerable item being in a different state than its remediation task. Understanding how states work helps to explain this behavior and can help with creating remediation tasks and creating or editing remediation task rules.

**Note:** Starting with v23.0 of Vulnerability Response, the **Vulnerable Item State Approval** workflow is deprecated and replaced by the flow Vulnerability State Approval Change in the flow designer.

Remediation tasks have many possible states as shown in the following diagram.

\[Omitted image "VR-State-Flow-v10.3.png"\] Alt text: Vulnerability Response state flow diagram that describes the remediation task states as follows: Open, Under Investigation, Awaiting Implementation, In Review, Deferred or False Positive, Resolved, and Closed.

**Note:** Each task form contains **Follow** and **Update** buttons that are standard for ServiceNow tasks.

For more information on remediation task states and actions you can perform on it at a respective state, see [Vulnerability Response remediation task states](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-rt-states.md).

For more information on detections, remediation task and vulnerable item states, see [Detections, remediation tasks, and vulnerable item states](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-detections-rt-vi-states.md).

For more information on remediation task and VI states, see [Remediation tasks and vulnerable item states](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-rt-vi-states.md).

For more information on remediation task state for VIs in multiple groups, see [Remediation task state for Vulnerable Items \(VITs\) in multiple groups](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-rt-state-for-multi-grp-vi.md).

-   **[Vulnerable item age calculation and display](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-vi-calcVI-age.md)**  
The age of vulnerable items \(VIs\) is displayed in the Vulnerability Response application with more detail.

**Parent Topic:**[Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vuln-landing-page.md)