Links

HCL AppScan

PlexTrac supports importing a HCL AppScan file in an xml format. Below are the mappings of fields.
Plextrac finding field
HCL path
title
  1. 1.
    Get the issue types: issue-group/item/advisory/ref
  2. 2.
    Get the data being imported: advisory-group/item/advisory/name
severity
issue-group/item/severity
references
  1. 1.
    Get the issue types: issue-group/item/advisory/ref
  2. 2.
    Get the data being imported: advisory-group/item/advisory/references
recommendations
  1. 1.
    Get the issue types: issue-group/item/remediation/ref
  2. 2.
    Get the data being imported: remediation-group/item/name
description
  1. 1.
    Get the issue types: issue-group/item/advisory/ref
  2. 2.
    Get the actual data being imported. All items are a concatenation of mulitple fields: advisory-group/item/advisory/testDescription plus advisory-group/item/advisory/testTechnicalDescription/text
evidence
issue-group/item/variant-group/item/issue-information/testReportChunk
field: <cwe>
label: cwe
value
issue-group/item/cwe
scores: <cvss>
label: cvss
value
issue-group/item/cvss-score
calculation
issue-group/item/cvss-vector/base-vector
PlexTrac asset field
HCL path
asset
  1. 1.
    Get the entity id: issue-group/item/entity/ref
  2. 2.
    Get the data being imported: entity-group/item id=(match from above)/name
Click Next below to see more mappings.
Last modified 4d ago