Findings Types

The Findings page presents findings identified by scanners in Tenable Vulnerability Management as well as those imported from other Tenable products. In the left navigation, choose a findings type. Then, refine results with filters in drop-downs >. Choosing a findings type does not remove your current findings filters.

Findings Types

The following table defines the findings types in the left navigation.

Findings Type

Description

Vulnerabilities

Findings such as system misconfigurations, unpatched software, poor data encryption, and weak authorization credentials. Refine By VPR, By Severity, or By State.

Host Audits

Host audits assess workstations, services, or network devices to evaluate the configuration, hardening, and security controls applied to a target. Refine these By Result of an audit.

Web Application Findings

Findings such as SQL injections, cross-site scripting, local file inclusions, security misconfigurations, and XML external entity processing. Filter By VPR, By Severity or By State.

Findings Type Filters

Under each findings type, use drop-downs > to apply filters that vary by type:

  • By VPR — Filter by the Vulnerability Priority Rating, which rates the risk and urgency of a vulnerability from 1 to 10.

  • By Severity — Filter by a vulnerability's severity—for example, Critical. For more information, see Vulnerability Severity Indicators.

  • By State — Filter by a vulnerability's state, which provides its detection status. For more information, see Vulnerability States.

  • By Result — Filter by audit results—for example, Passed or Failed.