---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Reference

# Application Vulnerability Response references {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Reference topics containing information about tables, roles, and properties installed
with the Application Vulnerability Response application.  
For details, see:

* [Application Vulnerability Response user groups and roles](https://servicenow-prod.fluidtopics.net/pNl52AMjKjWmG3S5Q_qwiA#avm-manage-roles "Before you can successfully remediate vulnerabilities with Application Vulnerability Response (AVR), you must assign users to user groups.")
* [Components installed with Application Vulnerability Response](https://servicenow-prod.fluidtopics.net/3Wyg8inCahk9bQhHOhrQcw "Several types of components are installed with activation of the Application Vulnerability Response feature, including tables, user roles, and scheduled jobs.")
* [Application Vulnerable Item (AVI) states](https://servicenow-prod.fluidtopics.net/qoaCtwzM0qn1frzwsqEg1g "Application Vulnerability Response offers a state model for the status of your application vulnerable items (AVIs), at any given time. Knowing how each state relates to and affects each other helps you to determine when and how to remediate your AVIs.")
* [Scanned application fields](https://servicenow-prod.fluidtopics.net/UI7zFoB_h12IaguZIlz8ng "Applications are stored during import under Administration > Discovered Applications in Application Vulnerability Response.")
* [Application Vulnerable Item fields](https://servicenow-prod.fluidtopics.net/2jK7cd9PJsH~xbJW_IAlVQ "Application vulnerable items (AVITs) are automatically created during third-part vulnerability integration imports.")
* [Application Vulnerability fields](https://servicenow-prod.fluidtopics.net/uEdT59Vi2icUdYvPSpbUHA "Vulnerabilities are created automatically when records are downloaded from the National Vulnerability Database (NVD), Common Weakness Enumeration (CWE) or third-party integrations. NVD and CWE are stored under Libraries in Vulnerability Response or under Vulnerabilities in Application Vulnerability Response.")
* [Penetration testing states](https://servicenow-prod.fluidtopics.net/7cymQ63jDNzDVesb7Jv_tw "Application owners can request penetration test assessment for their applications, and monitor the progress of the ethical hacking team until the request is resolved.")
{#avm-references__ul_evb_l2c_2xb}