{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":46247,"path":"security-management/vulnerability-response/vulnerability-response-severity-mapping.md","title":"Severity mapping for Vulnerability Response","bundle":null,"doc_type":null,"release":"australia","body":"\n# Severity mapping for Vulnerability Response\n\nVulnerability Response ships with National Vulnerability Database \\(NVD\\) to normalized ServiceNow severity mapping. ServiceNow third-party integrations provide severity mappings upon installation. These maps can be adjusted by changing the fields in existing maps.\n\n## Rapid7 Vulnerability Integration Severity Mapping\n\n**Normalised\\_Severity**\n\nCalculate normalised\\_severity on third-part entry using the severity coming from **sn\\_vul\\_nvd\\_entry** table. This is set using Business Rules for Lookup normalized severity on **sn\\_vul\\_entry** table.\n\n**Source\\_severity**\n\nData from the **severity\\_score** table is mapped to **source\\_severity** table while the **Rapid7 Vulnerability Integration- API** is running.\n\n**Priority**\n\nThis field is empty.\n\n## Qualys Vulnerability Integration Severity Mapping\n\n**Normalised\\_Severity**\n\nCalculate normalised\\_severity on third-part entry using the severity coming from **sn\\_vul\\_nvd\\_entry** table. This is set using Business Rules for Lookup normalized severity on **sn\\_vul\\_entry** table.\n\n**Source\\_severity**\n\nData from the **SEVERITY\\_LEVEL** is mapped to the **source\\_severity** table while the **Qualys Knowledge Base Integration** is running.\n\n**Priority**\n\nData for the Priority field is obtained from **SEVERITY table** and mapped to **priority** table while **Qualys Host Detection Integration** is running using the Business Rule mapped to Qualys Data.\n\n**Note:** Business Rules run in the background and checks the priority for Qualys and accordingly maps the Priority. So, to map Qualys data, BR is responsible.\n\n## Tenable.io Vulnerability Integration Severity Mapping\n\n**Normalised\\_Severity**\n\nCalculate normalised\\_severity on third-part entry using the severity coming from **sn\\_vul\\_nvd\\_entry** table. This is set using Business Rules for Lookup normalized severity on **sn\\_vul\\_entry** table.\n\n**Source\\_severity**\n\nData from **risk\\_factor** table is mapped to **source\\_severity** table while the **Tenable.io Plugin Integration** is running.\n\n**Priority**\n\nData from **severity\\_id** is mapped to **source\\_severity** while the **Tenable.io Open Vulnerabilities Integration** is running.\n\n**VPR**\n\nData from **score** is mapped to **Source\\_risk\\_score** while **Tenable.io Plugin Integration** is running.\n\nData from **Calculated from score** is mapped to **Source\\_risk\\_rating** while **Tenable.io Plugin Integration** is running.\n\n## Tenable.sc Vulnerability Integration Severity Mapping\n\n**Normalised\\_Severity**\n\nCalculate **normalised\\_severity** on third-part entry using the severity coming from sn\\_vul\\_nvd\\_entry table. This is set using Business Rules for Lookup normalized severity on **sn\\_vul\\_entry** table.\n\n**Source\\_severity**\n\nData for **riskFactor** table is mapped to **source\\_severity** while the **Tenable.io Plugin Integration** is running.\n\n**Priority**\n\nData from **severity** received as **\"severity\": \\{ \"id\": \"0\", \"name\": \"Info\", \"description\": \"Informative\" \\}** is mapped to **source\\_severity** while the **Tenable.io Open Vulnerabilities Integration** is running.\n\n**VPR**\n\nData from **vprScore** is mapped to **Source\\_risk\\_score** while **Tenable.io Plugin Integration** is running.\n\nData from **Calculated from vprScore** is mapped to **Source\\_risk\\_rating** while **Tenable.io Plugin Integration** is running.\n\n## TVM Severity Mapping\n\n**Normalised\\_Severity**\n\nCalculate normalised\\_severity on third-part entry using the severuty coming from **sn\\_vul\\_nvd\\_entry** table. This is set using Business Rules for Lookup normalized severity on **sn\\_vul\\_entry** table.\n\n**Source\\_severity**\n\nData from **severity** table is mapped to **source\\_severity** while **Microsoft TVM Vulnerability\\(CVE\\) Integration** is running.\n\n**Priority**\n\nThis field is empty.\n\n**Parent Topic:**[Advanced Vulnerability Response configuration tasks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/setup-tasks-optional.md)\n\n"}}