---
title: Map the severity of an application vulnerable item automatically
description: Application Vulnerability Response severity mapping transforms third-party source severity fields to recognizable fields within Vulnerability Response.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/avm-create-severity-map.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Use, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Map the severity of an application vulnerable item automatically

Application Vulnerability Response severity mapping transforms third-party source severity fields to recognizable fields within Vulnerability Response.

## Before you begin

Role required: App-Sec Manager group

## About this task

Application Vulnerability Response third-party integrations such as the Veracode Vulnerability Integration provide severity mappings on installation. These maps can be adjusted by changing the fields in existing maps.

Creating or editing a severity map is intended only for customized or non-standard third-party mappings in your environment and requires Application Vulnerability Response and ServiceNow expertise.

## Procedure

1.  Navigate to **All** > **Application Vulnerability Response** > **Administration** > **Normalized Severity Mapping**.

2.  Click **New**.

3.  Fill in the fields on the form, as appropriate.

<table id="table_vks_thr_ns"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Source

</td><td>

The name of the source for the severity mapping.

</td></tr><tr><td>

Source value

</td><td>

The source severity value.

</td></tr><tr><td>

Target value

</td><td>

The target severity value. Choices are: -   1- Critical
-   2 - High
-   3 - Medium
-   4 - Low
-   5 - None


</td></tr><tr><td>

Integration type

</td><td>

Integration type choices are:-   Vulnerability Response
-   Application Vulnerability Response
-   National Vulnerability Response
-   Container Vulnerability Response


</td></tr></tbody>
</table>4.  Repeat Step 3 for each source severity level.

5.  Select **Save**.