---
title: Import Common Vulnerability Reporting Framework \(CVRF\) data through CVRF URL
description: Import CVRF data by configuring the vendor URL in the Setup Assistant.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/import-cvrf-url.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Common Vulnerability Reporting Framework \(CVRF\), Configure vulnerability solution providers, Setting up vulnerability solution providers, Configuring Vulnerability Response using the Setup Assistant, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Import Common Vulnerability Reporting Framework \(CVRF\) data through CVRF URL

Import CVRF data by configuring the vendor URL in the Setup Assistant.

## Before you begin

Role required: sn\_vul.vulnerability\_admin, sn\_vul.admin \(deprecated\), or admin

## About this task

When the integration runs, data is fetched from the URL that gets parsed. Data is then stored in the sn\_vul\_solution table with source as the vendor name.

**Note:** Oracle directly publishes the CVRF URL for providing solutions. Thus, if you want to configure the integration for importing Oracle data, then ensure you have the CVRF URL for Oracle and follow the following steps.

## Procedure

1.  Navigate to **Vulnerability Response** > **Administration** > **Setup Assistant** > **Integration Configuration** > **Solution Integrations** > **Common Vulnerability Response Framework**.

2.  Click **Add Integration**.

3.  On the form, fill in the fields.

<table id="table_z5k_bwb_glb"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Import type

</td><td>

Type of import. Select **URL**.

</td></tr><tr><td>

Name

</td><td>

Unique name for the integration.

</td></tr><tr><td>

Vendor

</td><td>

Name of the vendor.**Note:** The **Source** field of the solutions is populated with the Vendor name.

</td></tr><tr><td>

URL

</td><td>

URL from which you want to fetch the solution data in the CVRF format.

</td></tr><tr><td>

Schedule

</td><td>

Frequency at which the data must be updated. **Note:** If the status tag of CVRF shows “FINAL”, then the field is automatically set to **On Demand** to prevent unnecessary runs.

</td></tr><tr><td>

Day

</td><td>

Day of the week when you want the data to get updated.

</td></tr><tr><td>

Time

</td><td>

Time of the week when you want the data to get updated.

</td></tr></tbody>
</table>4.  Click **Finish**.