This topic describes the performance of, or functionality for, a new feature in Tenable.io Key Enhancements. For more information, see Tenable.io Key Enhancements.
Required Tenable.io Vulnerability Management User Role: Basic, Scan Operator, Standard, Scan Manager, or Administrator
Note: Tenable.io retains findings data for only 15 months.
On the Findings page, you can view your vulnerabilities findings for your organization's resources.
To view your vulnerabilities findings:
In the upper-left corner, click the button.
The left navigation plane appears.
In the left navigation plane, in the Explore section, click Findings.
The Findings page appears, showing a table that lists your findings. By default, the Vulnerabilities tab is active.
In the Vulnerabilities findings table, you can perform any or all the following actions:
You can view basic information about your vulnerabilities in the following table:
Note: Not all the following columns appear in the table by default. To view columns that do not appear by default, add the columns to the table. For more information, see Interact with a Customizable Table.
The asset's UUID.
The name of the asset where the scanner detected the vulnerability. This value is unique to Tenable.io.
The IPv4 address for the affected asset.
|IPv6 Address||The IPv6 address for the affected asset.|
The vulnerability's CVSS-based severity. For more information, see CVSS vs. VPR.
The name of the plugin that identified the vulnerability detected in the finding.
The ID of the plugin that identified the vulnerability.
The family of the plugin that identified the vulnerability.
The port that the scanner used to connect to the asset where the scan detected the vulnerability.
The protocol the scanner used to communicate with the asset where the scan detected the vulnerability.
A descriptive icon indicating the VPR of the vulnerability. For more information, see CVSS vs. VPR.
|CVSSv2 Base Score||The CVSSv2 base score (intrinsic and fundamental characteristics of a vulnerability that are constant over time and user environments).|
The state of the vulnerability.
|CVSSv3 Base Score||The CVSSv3 base score (intrinsic and fundamental characteristics of a vulnerability that are constant over time and user environments).|
|Scan Origin||This column helps identify the scanner that detected the finding. It also helps identify whether the scan is a work-load scan. Possible values for this column are: Tenable.io, Tenable.sc, and Agentless Assessment.|
|Region||The cloud region where the asset runs.|
|Account ID||The unique identifier assigned to the asset resource in the cloud service that hosts the asset.|
|Live Result||This column indicates whether the scan result is based on live results. In Agentless Assessment, you can use live results to view scan results for new plugins based on the most recently collected snapshot data, without running a new scan. The possible values are Yes or No. For more information, see Live Results for Agentless Assessment.|
The date when a scan first found the vulnerability on an asset.
The date when a scan last found the vulnerability on an asset.This column appears in the table by default.
Shows a button that allows you to complete certain actions with the finding.
This column appears in the table by default and you cannot remove or configure it.
To view and complete actions with a finding in the findings table: