---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Automatically resolve duplicate vulnerabilities

# Automatically resolve duplicate vulnerabilities {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Starting from Vulnerability Response (VR) v17.1, you can automatically resolve any
duplicate vulnerabilities on an asset.

When an asset is scanned with multiple scanners, there's a chance of identifying the same
vulnerability as duplicates by the different scanners. For example, if the Qualys and Microsoft
scanners identify the same vulnerability, you can choose to automatically resolve the duplicate
one.

Sample scenario

VR creates a record, VI1, for vulnerability 1 from the Microsoft Defender for Endpoint scanner.
A second record, VI2, is created from the Qualys scanner for the same vulnerability. The
remediation team applies the patches that might resolve the VI1 and VI2 records. If you configure
the Qualys scan schedule beyond one day, by that time the Microsoft Defender gives the fixed
vulnerability information and VR closes the VI1 record as Closed/Fixed.

In this scenario, VI2 record is still in Open state and VR waits for the Qualys scan results.
In this situation, VI records from the second scanner remain in Open state even if the patch is
applied and the VI is confirmed as fixed by the other scanner.

To address this situation, you may consider to resolve the duplicate vulnerability record based
on the condition that the vulnerability is closed by the first scanner.  
Resolve vulnerabilities in the following ways:

* On-demand: Select the Resolve duplicate VIs UI action on the remediation task.
* Automated: Enable the system property `sn_vul.auto_resolve_duplicate_vit` to automatically resolve duplicate vulnerable items. The daily scheduled job 'Refresh and resolve duplicate VITs on remediation task' automatically refreshes the duplicate items.

{#automate-workflows-for-duplicate-vulnerabilities__ul_f4y_qsv_dvb}The duplicate VIs are then marked as resolved.  
Note:  
The resolved vulnerability item record is reopened if the scanner identifies it as Not Fixed.