Skip to content
Implement › Unified Security Exposure Management › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Configure a severity map in the Security Exposure Management Workspace

Security Exposure Management Workspace severity mapping transforms third-party source severity fields to recognizable fields in Unified Security Exposure Management.

Before you begin

Role required: See Access control lists (ACLs) for administration rules

About this task

Security Exposure Management Workspace ships with National Vulnerability Database (NVD) to normalized ServiceNow severity mapping. ServiceNow third-party integrations such as the Qualys Vulnerability Integration provide severity mappings on installation. These maps can be adjusted by changing the fields in existing maps.

Creating or editing a severity map is intended only for customized or non-standard third-party mappings in your environment.

Procedure

  1. Navigate to Workspaces > Security Exposure Management Workspace.

  2. Select Administration in the navigation pane.

  3. Under Others, select Review on the Normalized severity maps tile.

  4. Select New.

  5. Fill in the fields on the form, as appropriate.

FieldDescription
SourceThe name of the source for the severity mapping.
Target valueThe target severity value. Choices are: - 1- Critical - 2 - High - 3 - Medium - 4 - Low - 5 - None
Source valueThe source severity value.
Integration typeIntegration type choices are:- Vulnerability Response - Application Vulnerability Response - National Vulnerability Response - Container Vulnerability Response

  1. Repeat Step 5 for each source severity level.

  2. Select Save.

  3. To edit the severity mapping for an integration, select the integration and update the values in the Source Value and Target Value fields.