Note:
This app version is intended for Unified Security Exposure Management (USEM), a significant architectural upgrade to the Vulnerability Response applications.
If you are currently using Vulnerability Response and upgrading to USEM for the first time, you must use the Migration assistant for Unified Security Exposure Management to ensure a safe and successful upgrade. For full details, please refer to the KB2556844 and documentation before proceeding.
If you do not intend to upgrade to USEM, please select a version below 30.x when installing or upgrading.
Exception Management enables organizations to efficiently handle and document vulnerability exceptions. It provides a controlled process for requesting, reviewing, and approving exceptions to vulnerable findings, ensuring transparency and compliance. By automating workflows and capturing exception justifications, it helps reduce operational bottlenecks while maintaining risk visibility and audit readiness.
- Manual and Automated Exception Request and Approval Workflow - Streamline the process of submitting, reviewing, and approving exception requests with customizable workflows that ensure accountability and speed up decision making.
- Comprehensive Exception Tracking and Audit Trails - Maintain full visibility into all exceptions with detailed records of approvals, justifications, and timelines to support compliance and audit readiness.
New
- Exception approval and request extension test coverage is now mapped and automated. All approval and request extension scenarios have been reviewed, categorized, and automated in BT1, ensuring comprehensive coverage for multi-level approvals, state changes, and notification workflows.
Changed
- Accessibility improvements have been applied to approval request dialogs. The approvals page and request exception window now address accessibility issues, improving usability for all users.
Fixed
- White space characters are no longer accepted as valid input in the Request Exception modal for VIT records. Input validation has been updated to prevent empty or whitespace-only justification notes.
- The Approvals section in Security Exposure Management Workspace now displays the correct modal when clicking Approve or Reject. The modal behavior has been corrected to match user actions.
- Error handling has been improved for exception requests in Vulnerability Response. The system now properly detects and reports when no approvers are configured.
- Deprecated script includes are no longer referenced in other scripts. Internal script references have been cleaned up to prevent unexpected behavior.
- No additional system requirements. This update is fully compatible with existing Exception Management and Compensating Controls configurations