Veracode

PlexTrac supports importing XML files from Veracode. Veracode is an application security company offering various security analysis technologies on a single platform, such as static, dynamic, and software composition analysis.

Field Mappings

Below are the field mappings from Veracode to PlexTrac, broken up by findings and assets. If a field is not listed, PlexTrac does not currently import it.

Tables include the following columns:

• Veracode Field: the field name that appears in Veracode

• PlexTrac Field: the field name that appears in PlexTrac

• Direction: displays the direction in the flow of data occurring for the integration (a value of "x" means that the value is not imported)

Finding Field Mappings

Veracode Field	Direction	PlexTrac Field
Vulnerability Name	-->	Finding Title
Description	-->	Description
Background	-->	Description
Delivery Consultant	-->	Custom Field
Exploitation Difficulty	-->	Custom Field
Remediation Effort	-->	Custom Field
Recommendations	-->	Recommendations
References	-->	References
CWE ID	-->	CWE ID
Flaw Severity	-->	Severity
Remediation Effort	-->	Finding Tag
Category	-->	Finding Tag
Exploit Difficulty	-->	Finding Tag
Finding Status	-->	Finding Tag

Asset Field Mappings

Veracode Field	Direction	PlexTrac Field
File Path	-->	Asset Name
Application	-->	Parent Asset
Instance Details	-->	Asset Name
Line Number	-->	Asset Evidence
Function Prototype	-->	Asset Evidence
First Occurence	-->	Asset Evidence
Remediation Status	-->	Asset Evidence
Migration Status	-->	Asset Evidence