Abstract: With the growing threat of network vulnerability, cyberspace is confronted with numerous dangers and the vulnerability management agencies play an increasingly significant role therefore. Vulnerability management is supposed to be institutionalized, standardized, and streamlined, which is an indispensable cornerstone for effectively reducing vulnerability risk. To improve the efficiency of vulnerability management, general vulnerability management processes were proposed, and a workflow technology was used to model and run these processes. BPMN (business process model and notation) was used to model the management processes and a workflow management system was built to run them. Practices show that, the workflow technology based vulnerability management can improve the efficiency of vulnerability management and effectively remove and control the vulnerability threat.