Common Vulnerability Reporting Framework \(CVRF\)

---
title: Common Vulnerability Reporting Framework \(CVRF\)
description: The Common Vulnerability Reporting Framework \(CVRF\) offers a standardized framework for the creation of vulnerability report documentation. It’s an XML-based language that simplifies the sharing of crucial security-related information among diverse stakeholders across multiple organizations. By utilizing the CVRF format, information exchange and processing can be expedited.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/cvrf-common-vulnerability-reporting-framework.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Configure vulnerability solution providers, Setting up vulnerability solution providers, Configuring Vulnerability Response using the Setup Assistant, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Common Vulnerability Reporting Framework \(CVRF\)

The Common Vulnerability Reporting Framework \(CVRF\) offers a standardized framework for the creation of vulnerability report documentation. It’s an XML-based language that simplifies the sharing of crucial security-related information among diverse stakeholders across multiple organizations. By utilizing the CVRF format, information exchange and processing can be expedited.