Comment on page
HCL AppScan
PlexTrac supports importing XML files from HCL AppScan. HCL AppScan is a web application security testing tool used to identify and address security vulnerabilities in web applications before they are deployed using a combination of dynamic application security testing (DAST) and static application security testing (SAST) techniques to identify vulnerabilities.
PlexTrac does not support the export format for older versions of HCL AppScan (export version <2.5).

Below are the mappings of fields and any reference notes to provide context. If a field is not listed, then PlexTrac does not currently import.
Plextrac Field | HCL Path |
---|---|
title |
|
severity | issue-group/item/severity |
references |
|
recommendations |
|
description |
|
evidence | issue-group/item/variant-group/item/issue-information/testReportChunk |
field: <cwe> | |
label: cwe | |
value | issue-group/item/cwe |
scores: <cvss> | |
label: cvss | |
value | issue-group/item/cvss-score |
calculation | issue-group/item/cvss-vector/base-vector |
PlexTrac Field | HCL Path |
---|---|
asset |
|
Last modified 28d ago