Common Security Advisory Framework \(CSAF\)
concept australia Updated Sep 10, 2026 1 min read csaf-overview.md
When used with Vulnerability Solution Management, the Common Security Advisory Framework (CSAF) enables automation security notifications through a machine-readable JSON format.
The CSAF lets you integrate with any solution intelligence vendor using the solution management framework to import the intelligence data. The CSAF security notifications can be one of the following types.
- Security Advisories
- Vulnerability Exploitability Exchange (VEX)
- Security Incident Response
- Informational Advisory
The CSAF only supports the file imports, URL imports, and API imports of security advisories from vendors.
28 lines · 1.5 KB
--- title: Common Security Advisory Framework \(CSAF\) description: When used with Vulnerability Solution Management, the Common Security Advisory Framework \(CSAF\) enables automation security notifications through a machine-readable JSON format. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/csaf-overview.html release: australia product: Vulnerability Response classification: vulnerability-response topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Configure vulnerability solution providers, Setting up vulnerability solution providers, Configuring Vulnerability Response using the Setup Assistant, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations] --- # Common Security Advisory Framework \(CSAF\) When used with Vulnerability Solution Management, the Common Security Advisory Framework \(CSAF\) enables automation security notifications through a machine-readable JSON format. The CSAF lets you integrate with any solution intelligence vendor using the solution management framework to import the intelligence data. The CSAF security notifications can be one of the following types. - Security Advisories - Vulnerability Exploitability Exchange \(VEX\) - Security Incident Response - Informational Advisory The CSAF only supports the file imports, URL imports, and API imports of security advisories from vendors.
| title | Common Security Advisory Framework \(CSAF\) |
| description | When used with Vulnerability Solution Management, the Common Security Advisory Framework \(CSAF\) enables automation security notifications through a machine-readable JSON format. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/csaf-overview.html |
| release | australia |
| product | Vulnerability Response |
| classification | vulnerability-response |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Configure vulnerability solution providersSetting up vulnerability solution providersConfiguring Vulnerability Response using the Setup AssistantVulnerability Response implementationVulnerability ResponseUnified Security Exposure ManagementSecurity Operations |