---
title: Manage CVE and technique mapping
description: Manage the CVE and technique information that is mapped after you import the MITRE TAXII collections.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/manage-cve-and-technique-mapping.html
release: australia
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 4
breadcrumb: [MITRE-ATT&CK administration, MITRE-ATT&CK framework overview, Threat Intelligence, Enterprise security case management applications, Security Operations]
---

# Manage CVE and technique mapping

Manage the CVE and technique information that is mapped after you import the MITRE TAXII collections.

## Before you begin

Role required:

-   sn\_ti.admin: delete access
-   sn\_si.admin: create, write, delete access
-   sn\_ti.read: read access
-   sn\_ti.write: create, write access

**Note:** The **CVE-Technique Mapping** module is available only when the Vulnerability Response product is installed in your environment.

## About this task

Once you import the MITRE TAXII collections you can view the CVEs in your environment and their relationship with the associated MITRE-ATT&CK techniques. You can also create associations with CVEs and the attack patterns.

## Procedure

1.  Navigate to **All** > **Threat Intelligence** > **MITRE ATT&CK Repository** > **CVE - Technique Mapping**.

    You can view the listed CVEs and techniques.

2.  Select a CVE to view the vulnerability database entry.

3.  To add an entry, select **New**, map the CVE to an Attack Pattern, and select **Submit**.


**Parent Topic:**[MITRE-ATT&CK administration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/mitre-att-ck-administration.md)

**Related topics**  


[Get started with MITRE-ATT&CK framework]()

[Understand the MITRE to STIX data model]()

[Domain separation and MITRE-ATT&CK]()

[Set up the MITRE-ATT&CK framework]()

[Manage matrices]()

[Manage techniques]()

[Manage mitigations]()

[Manage groups]()

[Manage malware]()

[Manage tools]()

[Manage MITRE relationships]()

[Extend the MITRE-ATT&CK data]()

[Define the data source and detection tool mapping]()

[Define the data source and data component mapping]()

[Define the technique detection coverage]()

[Map your technique detection coverage to a technique]()

[Define the mitigation coverage]()

[Map your mitigation coverage to a technique]()

[Create and map detection rules]()

[Auto-extract technique rules for importing MITRE-ATT&CK information]()

[Review threat group and MITRE-ATT&CK techniques mapping]()

[Threat group to technique heatmap definition]()

[Review the MITRE-ATT&CK system properties]()