My Affected Assets

In the My Findings and Affected Assets section, the My Affected Assets tab shows all assets in the initiative with a finding that has not yet been fixed. Refine the results with the Query Builder or add tags to provide business context.

The My Affected Assets tab has the following columns, which you can show or hide as described in Customize Tables.

Column

Description

Name

Indicates the name of the asset.

Operating System Indicates the operating system run on the asset, for example Linux Kernel 3.13.

IPv4 Address

Indicates the IPv4 address for the asset.

IPv6 Address

Indicates the IPv6 address for the asset.

Plugin Count

Indicates the number of Tenable plugins that identified findings on the asset. Click the number to review details on the Findings workbench.

ACR

(Requires Tenable One or Tenable Lumin license) The Tenable-defined Asset Criticality Rating (ACR) as an integer from 1 to 10.

AES

(Requires Tenable One or Tenable Lumin license) The Tenable-defined Asset Exposure Score as an integer from 0 to 1000.

CVEs Indicates the Common Vulnerability and Exposure (CVE) identifier for the finding on the asset, as assigned by the CISA-sponsored CVE Program.
Source Indicates the scanner or sensor that identified a finding on the asset, for example Nessus network-based assessment.

Tags

Lists any asset tags for the asset.

Plugins

In any asset row, click the drop-down > to reveal a table of plugin results for the findings on that asset, with the following columns.

Column

Description

VPR

The Tenable-calculated Vulnerability Priority Rating (VPR) score from 0.1 to 10.

Note: A finding's VPR is based on the VPR of the plugin that identified it. When plugins are associated with multiple vulnerabilities, the highest VPR appears.

Severity

Indicates the vulnerability's severity, based on the Common Vulnerability Scoring System (CVSS).

Plugin Name

Indicates the name of the Tenable plugin that detected the finding.

Plugin ID

Indicates the ID of the Tenable plugin that detected the finding.

Findings

Indicates the number of findings detected on the asset.

CVSSv2 Indicates the CVSSv2 score for the finding.

CVSSv3

Indicates the CVSSv3 score for the finding.