HCL AppScan
PlexTrac supports importing a HCL AppScan file in an xml format. Below are the mappings of fields.
Plextrac finding field
HCL path
title
- 1.Get the issue types: issue-group/item/advisory/ref
- 2.Get the data being imported: advisory-group/item/advisory/name
severity
issue-group/item/severity
references
- 1.Get the issue types: issue-group/item/advisory/ref
- 2.Get the data being imported: advisory-group/item/advisory/references
recommendations
- 1.Get the issue types: issue-group/item/remediation/ref
- 2.Get the data being imported: remediation-group/item/name
description
- 1.Get the issue types: issue-group/item/advisory/ref
- 2.Get the actual data being imported. All items are a concatenation of mulitple fields: advisory-group/item/advisory/testDescription plus advisory-group/item/advisory/testTechnicalDescription/text
evidence
issue-group/item/variant-group/item/issue-information/testReportChunk
status
assetConnection
code_samples
caption
code
id
field: <cwe>
label: cwe
value
issue-group/item/cwe
scores: <cvss>
label: cvss
value
issue-group/item/cvss-score
calculation
issue-group/item/cvss-vector/base-vector
PlexTrac asset field
HCL path
asset
- 1.Get the entity id: issue-group/item/entity/ref
- 2.Get the data being imported: entity-group/item id=(match from above)/name
Click Next below to see more mappings.
Last modified 11d ago
Copy link