Application Vulnerability Response references

---
title: Application Vulnerability Response references
description: The following terms are used in Application Vulnerability Response.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/avr-references.html
release: brazil
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Reference, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Application Vulnerability Response references

The following terms are used in Application Vulnerability Response.

-   **[Application Vulnerable items \(AVIs\)](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/application-vulnerability-response/avm-vul-items-fields.md)**

    Pairings of vulnerability entries and potentially vulnerable applications in your company environment.

-   **[Assignment Rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/application-vulnerability-response/avm-assignment-rules.md)**

    Rules used to assign AVIs based on your defined criteria.

-   **[Common Platform Enumeration \(CPE\)](https://nvd.nist.gov/products/cpe)**

    A NIST NVD structured naming scheme for information technology systems, software, and packages.

-   **[Common Vulnerabilities and Exposures \(CVE\)](https://cve.mitre.org/)**

    Dictionary of publicly known information-security vulnerabilities and exposures.

-   **[Common Weakness Enumeration \(CWE\)](https://cwe.mitre.org/)**

    List of community-developed software weakness types.

-   **[Integrations](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/application-vulnerability-response/avm-integrations.md)**

    Scheduled jobs that pull report data from CWE or a third-party system, such as Veracode, to retrieve vulnerability data.

    **Note:** If the NIST National Vulnerability Database integration in Vulnerability Response is activated and configured, CVE enrichment is available for CWEs but not required. For information on the NIST National Vulnerability Database integration, see [Importing data with the NVD and CWE integrations and managing third-party libraries](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/c_NVDAndCWEDataImport.md).

-   **[National Vulnerability Database \(NVD\)](https://nvd.nist.gov/)**

    U.S. Government repository of standards-based vulnerability management data represented using the Security Content Automation Protocol \(SCAP\).

-   **[Remediation Target Rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/application-vulnerability-response/avm-time-to-remediate-rules.md)**

    Rules used to assign AVIs target dates for remediation based on your defined criteria.

-   **[Vulnerability Calculators](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/application-vulnerability-response/avm-calculators-rules.md)**

    Calculators used to prioritize and categorize application vulnerabilities based on your defined criteria.