---
title: Invicti Vulnerability Integration state mapping
description: The following source states from the Invicti Vulnerability Integration and their target states in your instance are listed in the following table.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/invicti-mapping.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: reference
last_updated: "2026-07-06"
reading_time_minutes: 2
breadcrumb: [Invicti Vulnerability Integration, Integrate with other applications, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Invicti Vulnerability Integration state mapping

The following source states from the Invicti Vulnerability Integration and their target states in your instance are listed in the following table.

**Note:** If you have selected **Manage exceptions** and **Manage False Positives** to manage the state transitions for these types of application vulnerable items \(AVITs\) in your ServiceNow AI Platform® instance described in [Configure the Invicti Vulnerability Integration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/application-vulnerability-response/invicti-configure.md), the source states that are imported from Invicti that might be mapped to deferred or closed states in your instance are mapped to the Open state.

|Invicti source states|Description of source states|Target state in the ServiceNow AI Platform|
|---------------------|----------------------------|------------------------------------------|
|Present|The Issue is identified.|Open|
|Present, AcceptedRisk, Revived|The Issue has been considered and is marked as a low risk vulnerability.|Deferred|
|Present, False Positive|The Issue has been considered and is marked as not a genuine vulnerability.|Closed|
|FixedUnconfirmed, Fixed Unconfirmed|The Issue has been fixed but not confirmed by Invicti Enterprise.|Resolved|
|Fixed \(Confirmed\), FixedConfirmed, FixedConfirmed, AcceptedRisk, FixedConfirmed, False Positive|The Issue has been fixed and confirmed by Invicti Enterprise and no further action is required.|Closed|
|Fixed \(Can't Retest\)|The Issue has been identified but Invicti cannot retest to confirm whether the Issue has been fixed or not.|Resolved|
|Revived|The issue was fixed in previous scans but has been found again.|Open|
|Deferred, Ignored|The Issue was ignored by the user. In Invicti Enterprise, to ignore an issue, a user updates its status to “accepted risk”.|Risk Accepted|

## Application release mapping

<table id="table_dj4_41t_d1c"><tbody><tr><td>

Source Field

</td><td>

Target field on ServiceNow AI Platform

</td></tr><tr><td>

ID

</td><td>

source\_app\_id

</td></tr><tr><td>

CreatedAt

</td><td>

app\_creation\_date

</td></tr><tr><td>

UpdatedAt

</td><td>

app\_updation\_date

</td></tr><tr><td>

Name

</td><td>

app\_name

</td></tr><tr><td>

RootUrl

</td><td>

Source\_additional\_info

</td></tr><tr><td>

Description

</td><td>

description

</td></tr><tr><td>

Tags

</td><td>

Tags

</td></tr></tbody>
</table>## Vulnerability mapping

<table id="table_vhf_y1t_d1c"><tbody><tr><td>

Source Field

</td><td>

Target field on ServiceNow AI Platform

</td></tr><tr><td>

Type

</td><td>

Category name

</td></tr><tr><td>

Vulnerability detail

</td><td>

Summary

</td></tr><tr><td>

Impact

</td><td>

Threat

</td></tr><tr><td>

Source references

</td><td>

Web references

</td></tr><tr><td>

Source recommendation

</td><td>

Solution

</td></tr><tr><td>

Type

</td><td>

source\_entry\_id/ID

</td></tr><tr><td>

Severity

</td><td>

source\_severity

</td></tr><tr><td>

Classification\[“Cwe”\]

</td><td>

CWE list

</td></tr><tr><td>

CvssVectorString

</td><td>

CVVS v3 fields

</td></tr></tbody>
</table>## Scan summary mapping

<table id="table_o3t_dbt_d1c"><tbody><tr><td>

Source field

</td><td>

Target Field

</td></tr><tr><td>

Source

</td><td>

Source

</td></tr><tr><td>

TotalVulnerabilityCount

</td><td>

Detected\_flaw\_count

</td></tr><tr><td>

Initiated date

</td><td>

Dynamic scan date

</td></tr><tr><td>

id

</td><td>

source\_scan\_id

</td></tr></tbody>
</table>## Application vulnerable item \(AVIT\) mapping

<table id="table_tsy_gbt_d1c"><tbody><tr><td>

Source Field

</td><td>

Target field on ServiceNow AI Platform

</td></tr><tr><td>

Type

</td><td>

Scan type

</td></tr><tr><td>

Website ID

</td><td>

Source app ID

</td></tr><tr><td>

ID

</td><td>

Source AVIT ID

</td></tr><tr><td>

Last seen date

</td><td>

Last found

</td></tr><tr><td>

First seen date

</td><td>

First found

</td></tr><tr><td>

Last updated date

</td><td>

Last scan date

</td></tr><tr><td>

parameters

</td><td>

Affected parameter

</td></tr><tr><td>

URL

</td><td>

Affected URL

</td></tr><tr><td>

Severity

</td><td>

Source severity

</td></tr><tr><td>

Url

</td><td>

Source link

</td></tr><tr><td>

Vulnerability detail

</td><td>

Source vulnerability summary

</td></tr><tr><td>

External references

</td><td>

Source references

</td></tr><tr><td>

Remedy + Remedy references

</td><td>

Source recommendation

</td></tr><tr><td>

State

</td><td>

Source remediation status

</td></tr><tr><td>

Impact

</td><td>

Source vulnerability explanation

</td></tr></tbody>
</table>