How issue management affects imported issues and vulnerabilities

You can manage vulnerabilities that are imported from AppScan® Source, AppScan® Standard, and AppScan® Developer.

If you manage issues in AppScan® Enterprise, you can use the default setting of the Enterprise Console, Administration > General Settings > Enterprise Console Settings > Issue Attributes. Issue attributes, such as the status and severity of existing vulnerabilities or the Comments field in the About this Issue report, are not overwritten when you import a file from AppScan® Standard, AppScan® Source, or AppScan® Developer. If you manage the status and severity of the vulnerabilities outside of AppScan® Enterprise, you can change the default setting of the Enterprise Console. Consequently, when the file is imported, those settings are taken from the imported file.

Issues are treated globally in AppScan Enterprise, regardless of the scan or import file that originally discovered them. Subsequent imports of the same settings file does not change these issues even if the Use Settings from Imported File check box is selected. However, upon subsequent imports of the same settings file, any new vulnerabilities are created in AppScan Enterprise as new issues, according to the settings of the imported file.