Invicti Vulnerability Integration state mapping
reference australia Updated Sep 10, 2026 2 min read invicti-mapping.md
The following source states from the Invicti Vulnerability Integration and their target states in your instance are listed in the following table.
Note: If you have selected Manage exceptions and Manage False Positives to manage the state transitions for these types of application vulnerable items (AVITs) in your ServiceNow AI Platform® instance described in Configure the Invicti Vulnerability Integration, the source states that are imported from Invicti that might be mapped to deferred or closed states in your instance are mapped to the Open state.
| Invicti source states | Description of source states | Target state in the ServiceNow AI Platform |
|---|---|---|
| Present | The Issue is identified. | Open |
| Present, AcceptedRisk, Revived | The Issue has been considered and is marked as a low risk vulnerability. | Deferred |
| Present, False Positive | The Issue has been considered and is marked as not a genuine vulnerability. | Closed |
| FixedUnconfirmed, Fixed Unconfirmed | The Issue has been fixed but not confirmed by Invicti Enterprise. | Resolved |
| Fixed (Confirmed), FixedConfirmed, FixedConfirmed, AcceptedRisk, FixedConfirmed, False Positive | The Issue has been fixed and confirmed by Invicti Enterprise and no further action is required. | Closed |
| Fixed (Can't Retest) | The Issue has been identified but Invicti cannot retest to confirm whether the Issue has been fixed or not. | Resolved |
| Revived | The issue was fixed in previous scans but has been found again. | Open |
| Deferred, Ignored | The Issue was ignored by the user. In Invicti Enterprise, to ignore an issue, a user updates its status to “accepted risk”. | Risk Accepted |
Application release mapping
|
Source Field |
Target field on ServiceNow AI Platform |
|
ID |
source_app_id |
|
CreatedAt |
app_creation_date |
|
UpdatedAt |
app_updation_date |
|
Name |
app_name |
|
RootUrl |
Source_additional_info |
|
Description |
description |
|
Tags |
Tags |
|
Source Field |
Target field on ServiceNow AI Platform |
|
Type |
Category name |
|
Vulnerability detail |
Summary |
|
Impact |
Threat |
|
Source references |
Web references |
|
Source recommendation |
Solution |
|
Type |
source_entry_id/ID |
|
Severity |
source_severity |
|
Classification[“Cwe”] |
CWE list |
|
CvssVectorString |
CVVS v3 fields |
|
Source field |
Target Field |
|
Source |
Source |
|
TotalVulnerabilityCount |
Detected_flaw_count |
|
Initiated date |
Dynamic scan date |
|
id |
source_scan_id |
|
Source Field |
Target field on ServiceNow AI Platform |
|
Type |
Scan type |
|
Website ID |
Source app ID |
|
ID |
Source AVIT ID |
|
Last seen date |
Last found |
|
First seen date |
First found |
|
Last updated date |
Last scan date |
|
parameters |
Affected parameter |
|
URL |
Affected URL |
|
Severity |
Source severity |
|
Url |
Source link |
|
Vulnerability detail |
Source vulnerability summary |
|
External references |
Source references |
|
Remedy + Remedy references |
Source recommendation |
|
State |
Source remediation status |
|
Impact |
Source vulnerability explanation |
356 lines · 5.3 KB
--- title: Invicti Vulnerability Integration state mapping description: The following source states from the Invicti Vulnerability Integration and their target states in your instance are listed in the following table. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/invicti-mapping.html release: australia product: Application Vulnerability Response classification: application-vulnerability-response topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 2 breadcrumb: [Invicti Vulnerability Integration, Integrate, Application Vulnerability Response, Unified Security Exposure Management, Security Operations] --- # Invicti Vulnerability Integration state mapping The following source states from the Invicti Vulnerability Integration and their target states in your instance are listed in the following table. **Note:** If you have selected **Manage exceptions** and **Manage False Positives** to manage the state transitions for these types of application vulnerable items \(AVITs\) in your ServiceNow AI Platform® instance described in [Configure the Invicti Vulnerability Integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/application-vulnerability-response/invicti-configure.md), the source states that are imported from Invicti that might be mapped to deferred or closed states in your instance are mapped to the Open state. |Invicti source states|Description of source states|Target state in the ServiceNow AI Platform| |---------------------|----------------------------|------------------------------------------| |Present|The Issue is identified.|Open| |Present, AcceptedRisk, Revived|The Issue has been considered and is marked as a low risk vulnerability.|Deferred| |Present, False Positive|The Issue has been considered and is marked as not a genuine vulnerability.|Closed| |FixedUnconfirmed, Fixed Unconfirmed|The Issue has been fixed but not confirmed by Invicti Enterprise.|Resolved| |Fixed \(Confirmed\), FixedConfirmed, FixedConfirmed, AcceptedRisk, FixedConfirmed, False Positive|The Issue has been fixed and confirmed by Invicti Enterprise and no further action is required.|Closed| |Fixed \(Can't Retest\)|The Issue has been identified but Invicti cannot retest to confirm whether the Issue has been fixed or not.|Resolved| |Revived|The issue was fixed in previous scans but has been found again.|Open| |Deferred, Ignored|The Issue was ignored by the user. In Invicti Enterprise, to ignore an issue, a user updates its status to “accepted risk”.|Risk Accepted| ## Application release mapping <table id="table_dj4_41t_d1c"><tbody><tr><td> Source Field </td><td> Target field on ServiceNow AI Platform </td></tr><tr><td> ID </td><td> source\_app\_id </td></tr><tr><td> CreatedAt </td><td> app\_creation\_date </td></tr><tr><td> UpdatedAt </td><td> app\_updation\_date </td></tr><tr><td> Name </td><td> app\_name </td></tr><tr><td> RootUrl </td><td> Source\_additional\_info </td></tr><tr><td> Description </td><td> description </td></tr><tr><td> Tags </td><td> Tags </td></tr></tbody> </table>## Vulnerability mapping <table id="table_vhf_y1t_d1c"><tbody><tr><td> Source Field </td><td> Target field on ServiceNow AI Platform </td></tr><tr><td> Type </td><td> Category name </td></tr><tr><td> Vulnerability detail </td><td> Summary </td></tr><tr><td> Impact </td><td> Threat </td></tr><tr><td> Source references </td><td> Web references </td></tr><tr><td> Source recommendation </td><td> Solution </td></tr><tr><td> Type </td><td> source\_entry\_id/ID </td></tr><tr><td> Severity </td><td> source\_severity </td></tr><tr><td> Classification\[“Cwe”\] </td><td> CWE list </td></tr><tr><td> CvssVectorString </td><td> CVVS v3 fields </td></tr></tbody> </table>## Scan summary mapping <table id="table_o3t_dbt_d1c"><tbody><tr><td> Source field </td><td> Target Field </td></tr><tr><td> Source </td><td> Source </td></tr><tr><td> TotalVulnerabilityCount </td><td> Detected\_flaw\_count </td></tr><tr><td> Initiated date </td><td> Dynamic scan date </td></tr><tr><td> id </td><td> source\_scan\_id </td></tr></tbody> </table>## Application vulnerable item \(AVIT\) mapping <table id="table_tsy_gbt_d1c"><tbody><tr><td> Source Field </td><td> Target field on ServiceNow AI Platform </td></tr><tr><td> Type </td><td> Scan type </td></tr><tr><td> Website ID </td><td> Source app ID </td></tr><tr><td> ID </td><td> Source AVIT ID </td></tr><tr><td> Last seen date </td><td> Last found </td></tr><tr><td> First seen date </td><td> First found </td></tr><tr><td> Last updated date </td><td> Last scan date </td></tr><tr><td> parameters </td><td> Affected parameter </td></tr><tr><td> URL </td><td> Affected URL </td></tr><tr><td> Severity </td><td> Source severity </td></tr><tr><td> Url </td><td> Source link </td></tr><tr><td> Vulnerability detail </td><td> Source vulnerability summary </td></tr><tr><td> External references </td><td> Source references </td></tr><tr><td> Remedy + Remedy references </td><td> Source recommendation </td></tr><tr><td> State </td><td> Source remediation status </td></tr><tr><td> Impact </td><td> Source vulnerability explanation </td></tr></tbody> </table>
| title | Invicti Vulnerability Integration state mapping |
| description | The following source states from the Invicti Vulnerability Integration and their target states in your instance are listed in the following table. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/invicti-mapping.html |
| release | australia |
| product | Application Vulnerability Response |
| classification | application-vulnerability-response |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 2 |
| breadcrumb | Invicti Vulnerability IntegrationIntegrateApplication Vulnerability ResponseUnified Security Exposure ManagementSecurity Operations |