vulnerability-deduplication

Merge duplicate vulnerability records across scanners using CVSS prioritization.

34|13|Updated Feb 6, 2026
One-click install
npx skills add https://github.com/Happy-Technologies-LLC/happy-servicenow-skills --skill vulnerability-deduplication
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-deduplication
Source: https://github.com/Happy-Technologies-LLC/happy-servicenow-skills/tree/main/skills/secops/vulnerability-deduplication
Command: npx skills add https://github.com/Happy-Technologies-LLC/happy-servicenow-skills --skill vulnerability-deduplication

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Vulnerability deduplication reduces noise by merging duplicate findings reported by multiple scanners on the same asset, delivering a single, accurate exposure view for prioritization and remediation.

Core Features & Use Cases

  • Identify and consolidate duplicate vulnerability records across multiple scanners for the same CVE and configuration item.
  • Prioritize deduplicated vulnerabilities using CVSS scores and business criticality to streamline remediation planning.
  • Maintain an audit trail of deduplication decisions and consolidate redundant remediation tasks.

Quick Start

Run the deduplication workflow after importing vulnerability data to consolidate duplicates and update primary records.

Frequently Asked Questions about vulnerability-deduplication

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deduplicate vulnerability findings across multiple scanners in ServiceNow?

Deduplicate vulnerability findings by running a workflow that applies cross-table matching to consolidate duplicate records across multiple scanners for the same CVE and configuration item. This process updates primary records and maintains an audit trail of deduplication decisions.

What is the best way to prioritize deduplicated vulnerabilities for remediation?

Prioritize deduplicated vulnerabilities by evaluating CVSS scores alongside business criticality. This approach streamlines remediation planning by consolidating redundant remediation tasks into a single, accurate exposure view.

When should I run vulnerability deduplication workflows during the security lifecycle?

Run vulnerability deduplication workflows during vulnerability imports, hygiene reviews, and onboarding of new scanners. Applying the workflow after importing vulnerability data ensures a clean, prioritized exposure view across ServiceNow vulnerability tables.

Does vulnerability deduplication require specific ServiceNow tables or configurations?

Vulnerability deduplication operates across ServiceNow vulnerability tables using MCP and REST workflows. It requires no additional dependencies to implement cross-table matching, CVSS prioritization, remediation task consolidation, and audit-trail logging.

Can I consolidate remediation tasks without losing the audit trail of original scanner findings?

Consolidating remediation tasks maintains a full audit trail of deduplication decisions. The workflow logs all matching actions across ServiceNow vulnerability tables, ensuring original scanner findings remain traceable while reducing duplicate noise.