Viewing Vulnerability Details

Scenario

This topic describes where to view details about Linux, Windows, Web-CMS, and application vulnerabilities.

Prerequisites

• You have installed HSS agent. For details, see the Host Security Service User Guide.
• HSS logs have been connected to SecMaster and the function of automatically converting logs into alerts has been enabled. For details, see Data Integration.

Procedure

1. Log in to the management console.
2. Click in the upper part of the page and choose Security > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

4. In the navigation pane on the left, choose Risk Prevention > Vulnerabilities.
   Figure 2 Accessing the vulnerability management page
   

5. View vulnerability information on the Vulnerabilities page.

   Table 1 Viewing vulnerability information

   Parameter	Description
   Vulnerability Type Distribution	This graph displays the total number of vulnerabilities and the distribution of vulnerabilities by type.
   Top 5 Vulnerabilities	The Top 5 Vulnerabilities area lists the five vulnerabilities with the most affected assets. The more affected assets, the higher the vulnerability ranking is. The Vulnerability ID tab displays the IDs and the affected asset quantity for the five vulnerabilities. The Vulnerability Type tab displays the names, severity levels, and affected asset quantity for the five vulnerabilities.
   Top 5 Vulnerable Resources	This graph displays the five resources with the most vulnerabilities.
   Vulnerability List	The vulnerable list area includes Linux Vulnerabilities, Windows Vulnerabilities, Web-CMS Vulnerabilities, and Application Vulnerabilities tabs. Table 2 lists parameters for these vulnerability tabs. To quickly search for a specific vulnerability, use filters in your search. Specifically, you can specify the vulnerability name, vulnerability ID, severity, and handling status, enter a keyword in the search box, and click . To view details about a vulnerability, click the vulnerability name and view the details on the page displayed on the right. You can view the total number of vulnerabilities below the vulnerability list. You can view a maximum of 10,000 vulnerability records page by page. To view more than 10,000 records, optimize the filter criteria.

   Table 2 Vulnerability parameters

   Parameter	Description
   Vulnerability Name	Name of the scanned vulnerability. Click a vulnerability name to view vulnerability description and vulnerability library information.
   Severity	Severity level of the vulnerability.
   ID	ID of the vulnerability.
   Affected Assets	Total number of assets affected by a vulnerability
   Vulnerability ID	ID of a vulnerability.
   Last Scanned	Time of the last scan
   Handled	This column specifies whether the vulnerability has been handled.