---
title: Severity mapping for Vulnerability Response
description: Vulnerability Response ships with National Vulnerability Database \(NVD\) to normalized ServiceNow severity mapping. ServiceNow third-party integrations provide severity mappings upon installation. These maps can be adjusted by changing the fields in existing maps.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/vulnerability-response-severity-mapping.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [Advanced Vulnerability Response configuration tasks, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Severity mapping for Vulnerability Response

Vulnerability Response ships with National Vulnerability Database \(NVD\) to normalized ServiceNow severity mapping. ServiceNow third-party integrations provide severity mappings upon installation. These maps can be adjusted by changing the fields in existing maps.

## Rapid7 Vulnerability Integration Severity Mapping

**Normalised\_Severity**

Calculate normalised\_severity on third-part entry using the severity coming from **sn\_vul\_nvd\_entry** table. This is set using Business Rules for Lookup normalized severity on **sn\_vul\_entry** table.

**Source\_severity**

Data from the **severity\_score** table is mapped to **source\_severity** table while the **Rapid7 Vulnerability Integration- API** is running.

**Priority**

This field is empty.

## Qualys Vulnerability Integration Severity Mapping

**Normalised\_Severity**

Calculate normalised\_severity on third-part entry using the severity coming from **sn\_vul\_nvd\_entry** table. This is set using Business Rules for Lookup normalized severity on **sn\_vul\_entry** table.

**Source\_severity**

Data from the **SEVERITY\_LEVEL** is mapped to the **source\_severity** table while the **Qualys Knowledge Base Integration** is running.

**Priority**

Data for the Priority field is obtained from **SEVERITY table** and mapped to **priority** table while **Qualys Host Detection Integration** is running using the Business Rule mapped to Qualys Data.

**Note:** Business Rules run in the background and checks the priority for Qualys and accordingly maps the Priority. So, to map Qualys data, BR is responsible.

## Tenable.io Vulnerability Integration Severity Mapping

**Normalised\_Severity**

Calculate normalised\_severity on third-part entry using the severity coming from **sn\_vul\_nvd\_entry** table. This is set using Business Rules for Lookup normalized severity on **sn\_vul\_entry** table.

**Source\_severity**

Data from **risk\_factor** table is mapped to **source\_severity** table while the **Tenable.io Plugin Integration** is running.

**Priority**

Data from **severity\_id** is mapped to **source\_severity** while the **Tenable.io Open Vulnerabilities Integration** is running.

**VPR**

Data from **score** is mapped to **Source\_risk\_score** while **Tenable.io Plugin Integration** is running.

Data from **Calculated from score** is mapped to **Source\_risk\_rating** while **Tenable.io Plugin Integration** is running.

## Tenable.sc Vulnerability Integration Severity Mapping

**Normalised\_Severity**

Calculate **normalised\_severity** on third-part entry using the severity coming from sn\_vul\_nvd\_entry table. This is set using Business Rules for Lookup normalized severity on **sn\_vul\_entry** table.

**Source\_severity**

Data for **riskFactor** table is mapped to **source\_severity** while the **Tenable.io Plugin Integration** is running.

**Priority**

Data from **severity** received as **"severity": \{ "id": "0", "name": "Info", "description": "Informative" \}** is mapped to **source\_severity** while the **Tenable.io Open Vulnerabilities Integration** is running.

**VPR**

Data from **vprScore** is mapped to **Source\_risk\_score** while **Tenable.io Plugin Integration** is running.

Data from **Calculated from vprScore** is mapped to **Source\_risk\_rating** while **Tenable.io Plugin Integration** is running.

## TVM Severity Mapping

**Normalised\_Severity**

Calculate normalised\_severity on third-part entry using the severuty coming from **sn\_vul\_nvd\_entry** table. This is set using Business Rules for Lookup normalized severity on **sn\_vul\_entry** table.

**Source\_severity**

Data from **severity** table is mapped to **source\_severity** while **Microsoft TVM Vulnerability\(CVE\) Integration** is running.

**Priority**

This field is empty.

**Parent Topic:**[Advanced Vulnerability Response configuration tasks](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/setup-tasks-optional.md)