Template for manual ingestion of vulnerabilities

The template provides columns that must be filled with vulnerability and configuration item (CI) data. After the template is populated and uploaded, the data is processed.

Instructions for populating the template

To enter the details in the template, follow the instructions provided in the following table.

Table 1. Template instructions

Column	Required/Optional?	String length (max)/ Valid values	Description
Asset ID	Optional	255	Universally unique identifier (UUID) or Asset ID. It can be the value generated by a scanner.
Enter information in at least one of the following five columns:
MAC Address	Required	24	Host or asset information. The combination of all values provided must be unique for an asset.
FQDN	Required	255
NETBIOS	Required	255
IP Address	Required	255
Hostname	Required	255
The remaining columns don't depend on each other.
Vulnerability ID	Required	255	Represents a vulnerability in the National Vulnerability Database (NVD) or an ID returned from a third-party scanner.
Vulnerability Summary	Optional	512	Brief description of the vulnerability. It is added to the database only when the Vulnerability ID is unavailable.
Severity	Optional	critical, high, medium, low, none	Severity of the vulnerability. It is added to the database only when the Vulnerability ID is unavailable. If the record is empty, then by default it is considered as critical.
Port	Optional	Not applicable	Port from which the vulnerability is detected. The value must be a valid integer. If there is an invalid input, the record is skipped.
Protocol	Optional	40	Type of network protocol used.
Proof	Optional	4000	Represents the location or system path of the vulnerability.
State	Optional	open, fixed	Status of the detection. If the record is empty, then by default it is considered open.