Identify and escalate security issues using CWE

task australia Updated Sep 10, 2026 1 min read escalate-sec-issue-CWE.md

View the library of Common Weakness Enumeration (CWE) records from the National Vulnerability Database (NVD) to understand how they relate to the Common Vulnerability and Exposure (CVE) records. Then use this information to match the vulnerable software entries to a Software Asset Management discovery model.

Before you begin

Role required: sn_vul.vulnerability_write

Persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see Assign the Vulnerability Response persona roles using Setup Assistant. For more information about managing granular roles, see Manage persona and granular roles for Vulnerability Response.

Procedure

Navigate to All > Vulnerability > Libraries > CWE.

A list of vulnerable software downloaded is shown.
Click a CWE software record to view vulnerability information.
Click the following related lists to get more information for identifying vulnerabilities.

Related list	Description
Vulnerable Items	Lists any vulnerable items, which consist of pairings of a potentially vulnerable configuration item and software. To get more information about a pairing, click the information icon ([Omitted image "i-icon.png"] Alt text: Information icon).Note: If software is removed, any associated vulnerable items are closed and removed from the Vulnerable Items related list.
Vulnerability Entries	Lists vulnerability entries for the selected software record. Click a record to view its details.

If vulnerabilities were identified and vulnerable items were created, you can [Resolve remediation tasks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/remediate-vuln-groups.md), as needed.

63 lines · 3.4 KB Wrap lines

---
title: Identify and escalate security issues using CWE
description: View the library of Common Weakness Enumeration \(CWE\) records from the National Vulnerability Database \(NVD\) to understand how they relate to the Common Vulnerability and Exposure \(CVE\) records. Then use this information to match the vulnerable software entries to a Software Asset Management discovery model.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/escalate-sec-issue-CWE.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Refresh Vulnerability Response vulnerable items, Manage individual vulnerable items manually, Vulnerability Response remediation overview, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Identify and escalate security issues using CWE

View the library of Common Weakness Enumeration \(CWE\) records from the National Vulnerability Database \(NVD\) to understand how they relate to the Common Vulnerability and Exposure \(CVE\) records. Then use this information to match the vulnerable software entries to a Software Asset Management discovery model.

## Before you begin

Role required: sn\_vul.vulnerability\_write

Persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see [Assign the Vulnerability Response persona roles using Setup Assistant](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr-assign-personas_SA.md). For more information about managing granular roles, see [Manage persona and granular roles for Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/vr_manage_granular-roles.md).

## Procedure

1.  Navigate to **All** &gt; **Vulnerability** &gt; **Libraries** &gt; **CWE**.

    A list of vulnerable software downloaded is shown.

2.  Click a CWE software record to view vulnerability information.

3.  Click the following related lists to get more information for identifying vulnerabilities.

<table id="choicetable_hgr_s3j_dt"><thead><tr><th align="left" id="d253579e115">

Related list

</th><th align="left" id="d253579e118">

Description

</th></tr></thead><tbody><tr><td id="d253579e124">

**__Vulnerable Items__**

</td><td>

Lists any vulnerable items, which consist of pairings of a potentially vulnerable configuration item and software. To get more information about a pairing, click the information icon \(\[Omitted image "i-icon.png"\] Alt text: Information icon\).**Note:** If software is removed, any associated vulnerable items are closed and removed from the **Vulnerable Items** related list.

</td></tr><tr><td id="d253579e148">

**__Vulnerability Entries__**

</td><td>

Lists vulnerability entries for the selected software record. Click a record to view its details.

</td></tr></tbody>
</table>    If vulnerabilities were identified and vulnerable items were created, you can [Resolve remediation tasks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/remediate-vuln-groups.md), as needed.