Generic framework to ingest data from any solution vendor

concept brazil Updated Sep 10, 2026 1 min read ingest-data-solution-vendors-generic-framework.md

A generic framework for solution intelligence integration is available to support ingestion of data in different file formats from solution vendors. These formats speed up information exchange and processing and facilitate the sharing of critical security-related information in a standardized reporting format.

The supported file formats are:

Common Vulnerability Reporting Framework (CVRF)

The Common Vulnerability Reporting Framework (CVRF) is an XML-based language. Major vendors such as Oracle, Red Hat, Cisco, and Microsoft support the CVRF format.
Common Security Advisory Framework (CSAF)

The Common Security Advisory Framework (CSAF) is an open-source standard that provides JSON-based structured, machine-readable security advisories. Major vendors such as Siemens, Red Hat, Hitachi, and Schneider support the CSAF format.

The CVRF or CSAF supported solution management includes the following key features:

Configuration through Setup Assistant
Support of importing CVRF or CSAF data through file import
Support of importing CVRF or CSAF data through CVRF or CSAF URL
Support of importing CVRF or CSAF data through advisories
Mapping of solutions with related vulnerabilities

The Vulnerability Response plugin takes care of updating the metrics statuses of the created solution.

For more information on how to configure the solution providers, see Configure vulnerability solution providers.

Parent Topic:Vulnerability Solution Management

44 lines · 2.7 KB Wrap lines

---
title: Generic framework to ingest data from any solution vendor
description: A generic framework for solution intelligence integration is available to support ingestion of data in different file formats from solution vendors. These formats speed up information exchange and processing and facilitate the sharing of critical security-related information in a standardized reporting format.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response/ingest-data-solution-vendors-generic-framework.html
release: brazil
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Vulnerability Solution Management, Exploring the Vulnerability Response application, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Generic framework to ingest data from any solution vendor

A generic framework for solution intelligence integration is available to support ingestion of data in different file formats from solution vendors. These formats speed up information exchange and processing and facilitate the sharing of critical security-related information in a standardized reporting format.

The supported file formats are:

-   **Common Vulnerability Reporting Framework \(CVRF\)**

    The Common Vulnerability Reporting Framework \(CVRF\) is an XML-based language. Major vendors such as Oracle, Red Hat, Cisco, and Microsoft support the CVRF format.

-   **Common Security Advisory Framework \(CSAF\)**

    The Common Security Advisory Framework \(CSAF\) is an open-source standard that provides JSON-based structured, machine-readable security advisories. Major vendors such as Siemens, Red Hat, Hitachi, and Schneider support the CSAF format.


The CVRF or CSAF supported solution management includes the following key features:

-   Configuration through Setup Assistant
-   Support of importing CVRF or CSAF data through file import
-   Support of importing CVRF or CSAF data through CVRF or CSAF URL
-   Support of importing CVRF or CSAF data through advisories
-   Mapping of solutions with related vulnerabilities

The Vulnerability Response plugin takes care of updating the metrics statuses of the created solution.

For more information on how to configure the solution providers, see [Configure vulnerability solution providers](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/configure-vulnerability-solution-providers.md).

**Parent Topic:**[Vulnerability Solution Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/vuln-solution-mgmt.md)