---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Vulnerability integration script

# Vulnerability integration script {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

On the Vulnerability Integration form, the integration script is a reference to a script
include that extends the VulnerabilityIntegrationBase script include.  
The functionality contained in this script is called by the VulnerabilityIntegrationController to manage the means by which data is retrieved from an external data source. Each subclass of VulnerabilityIntegrationBase has access to contextual information about the calling process. That information is available through the following member variables:

* integrationGr --- a GlideRecord of the vulnerability integration record that requested the integration to run.
* integrationProcessGr --- a GlideRecord that provides contextual information for the current process of an integration.
{#c_AboutVulnIntegScript__ul_rvh_vfb_f5}

The vulnerability process contains special parameters to be used within an integration,
generally for pagination purposes. Each run of a vulnerability integration (called a
Vulnerability Integration Run) has at least one associated vulnerability integration process. For
multi-call integrations, there are one or more vulnerability integration process records for each
Vulnerability Integration Run.

The script include must provide an implementation for the `retrieveData()`
method and return an object that is processed by the report processor script. The object returned
by retrieveData is a simple object with properties for content, contentType, and extension.  
Here is a screen shot of VulnerabilityIntegrationBase.retrieveData(): Figure 1. VulnerabilityIntegrationBase.retrieveData()

The logic in the `retrieveData()` depends on the interface required for
retrieving the data. For example, if the source of the data being pulled has a REST API, the body
of this method could be calling the REST endpoint, likely via RESTMessageV2. The response of the
call can then be parsed or put into an attachment, and the details could be used to construct the
return object.