---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Template for manual ingestion of vulnerabilities

# Template for manual ingestion of vulnerabilities {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The template provides columns that must be filled with vulnerability and configuration
item (CI) data. After the template is populated and uploaded, the data is processed.

## Instructions for populating the template {#manual-ingestion-template__section_snj_p3m_v5b}

To enter the details in the template, follow the instructions provided in the following table.{#manual-ingestion-template__table_tmb_q3m_v5b__entry__4}

| Column | Required/Optional? | String length (max)/ Valid values | Description |
|-|-|-|-|
| Asset ID | Optional | 255 | Universally unique identifier (UUID) or Asset ID. It can be the value generated by a scanner. |
| Enter information in at least one of the following five columns: ||||
| MAC Address | Required | 24 | Host or asset information. The combination of all values provided must be unique for an asset. |
| FQDN | Required | 255 | Host or asset information. The combination of all values provided must be unique for an asset. |
| NETBIOS | Required | 255 | Host or asset information. The combination of all values provided must be unique for an asset. |
| IP Address | Required | 255 | Host or asset information. The combination of all values provided must be unique for an asset. |
| Hostname | Required | 255 | Host or asset information. The combination of all values provided must be unique for an asset. |
| The remaining columns don't depend on each other. ||||
| Vulnerability ID | Required | 255 | Represents a vulnerability in the National Vulnerability Database (NVD) or an ID returned from a third-party scanner. |
| Vulnerability Summary | Optional | 512 | Brief description of the vulnerability. It is added to the database only when the Vulnerability ID is unavailable. |
| Severity | Optional | critical, high, medium, low, none | Severity of the vulnerability. It is added to the database only when the Vulnerability ID is unavailable. If the record is empty, then by default it is considered as critical. |
| Port | Optional | Not applicable | Port from which the vulnerability is detected. The value must be a valid integer. If there is an invalid input, the record is skipped. |
| Protocol | Optional | 40 | Type of network protocol used. |
| Proof | Optional | 4000 | Represents the location or system path of the vulnerability. |
| State | Optional | open, fixed | Status of the detection. If the record is empty, then by default it is considered open. |
[Table 1. Template instructions]

{#manual-ingestion-template__table_tmb_q3m_v5b}