HCL AppScan
PlexTrac supports importing XML files from HCL AppScan. HCL AppScan is a security testing tool used to identify and address security vulnerabilities in web applications before deployment. It uses a combination of dynamic application security testing (DAST) and static application security testing (SAST) techniques to identify vulnerabilities.
PlexTrac does not support the export format for older versions of HCL AppScan (export version <2.5).
Finding Field Mappings
Below are the mappings of fields and any reference notes to provide context. If a field is not listed, PlexTrac does not currently import it.
Plextrac Field | HCL Path |
---|---|
title |
|
severity | issue-group/item/severity |
references |
|
recommendations |
|
description |
|
evidence | issue-group/item/variant-group/item/issue-information/testReportChunk |
field: <cwe> | |
label: cwe | |
value | issue-group/item/cwe |
scores: <cvss> | |
label: cvss | |
value | issue-group/item/cvss-score |
calculation | issue-group/item/cvss-vector/base-vector |
Asset Field Mappings
PlexTrac Field | HCL Path |
---|---|
asset |
|
Last updated