Include Closed Fortify on Demand application vulnerable items

task australia Updated Sep 10, 2026 1 min read include-closed-avits-fortify.md
Raw file servicenow.com

By default, Closed application vulnerable items (AVITs) are not created during Fortify Vulnerable Item integration imports. If you want to create them, you must change a system property.

Before you begin

The Fortify Vulnerability Integration must be installed and running.

Role required: App-Sec Manager

Procedure

  1. In the left navigation Filter navigator text box, type sys_properties.list.

  2. In the Name search box for the list, enter sn_vul.create_closed.

  3. Double-click on the Value field and set to True

  4. Click the green check mark icon [Omitted image "GreenCheckMarkIcon.png"] Alt text: green check mark icon to save.

    Records in the Closed state in the next Fortify import are created as AVITs in Application Vulnerability Response.

Search documentation
Search document titles and file paths on the australia branch