0
4.7.1
Zurich, Yokohama, Xanadu, Washington DC, Vancouver
Vulnerability Response Integration with Veracode imports applications and application vulnerabilities using Application Vulnerability Response. Application Vulnerability Response is a feature in Vulnerability Response that helps you prioritize and remediate vulnerabilities.
Imports applications and application vulnerabilities resulting from Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Software Composition Analysis (SCA), manual penetration testing results, and Software Bill of Materials (SBOM)s from Veracode into the Application Vulnerability Response feature. Some features of this integration:
- CI Lookup Rules - Lookup rules are used to search for configuration items (CIs) in the CMDB with matching information from the Veracode Vulnerability Integration.
- A shared API ingests DAST, SAST, SCA data and manual penetration testing results.
- A separate API is used to ingest SBOM data.
New
- Added the required mapping from Veracode to AVITs for displaying the 'fixable' status of findings
Fixed
- As part of this defect, fixed the workflow to deactivate the Discovered Applications that are no longer present in the Application List from Veracode.
The following applications must be installed and activated:
- Vulnerability Response.
- ServiceNow Software Bill of Materials applications are required to view the data you import with the Veracode Software Bill of Materials (SBOM) Integration.
For information on Vulnerability Response application compatibility see, "Vulnerability Response and Configuration Compliance Compatibility Matrix" under Supporting Links and Docs.
Permissions and roles
- Role required: System Admin (admin) or Application Security Manager (User part of App-Sec Manager group)