I scanned a website with IBM AppScan and it reports multiple vulnerabilities, but when I test it manually I am not able to find the exact issue.

How is AppScan able to find vulnerabilities while I cannot find them when manually passing the same request in Burp Suite as it shows in AppScan.