Viewing Vulnerability Details

Scenario

This topic describes how to view vulnerabilities details.

Prerequisites

• You have installed HSS agent. For details, see the Host Security Service User Guide.
• HSS logs have been connected to SecMaster and the function of automatically converting logs to alerts has been enabled. For details, see Data Integration. If access to HSS vulnerability scan results has been enabled during data integration but the automatic alert conversion is disabled, the vulnerability scan results will not be displayed on the Vulnerabilities page in SecMaster.

Procedure

1. Log in to the management console.
2. Click in the upper part of the page and choose Security > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
4. In the navigation pane on the left, choose Risk Prevention > Vulnerabilities.
5. View vulnerability information on the Vulnerabilities page.

   Table 1 Viewing vulnerability information

   Parameter	Description
   Vulnerability Type Distribution	This graph displays the total number of vulnerabilities and the distribution of vulnerabilities by type.
   Top 5 Vulnerabilities	The Top 5 Vulnerabilities area lists the five vulnerabilities with the most affected assets. The more affected assets, the higher the vulnerability ranking is. The Vulnerability ID tab displays the IDs and the affected asset quantity for the five vulnerabilities. The Vulnerability Type tab displays the names, severity levels, and affected asset quantity for the five vulnerabilities.
   Top 5 Vulnerable Resources	This graph displays the five resources with the most vulnerabilities.
   Vulnerability List	The vulnerable list area includes Linux Vulnerabilities, Windows Vulnerabilities, Web-CMS Vulnerabilities, and Application Vulnerabilities tabs. Table 2 lists parameters for these vulnerability tabs. If there are many vulnerabilities displayed, use filters to search for a specific one. To view details about a vulnerability, click the vulnerability name and view the details on the page displayed on the right. You can view the total number of vulnerabilities below the vulnerability list. You can view a maximum of 10,000 vulnerability records page by page. To view more than 10,000 records, optimize the filter criteria.

   Table 2 Vulnerability parameters

   Parameter	Description
   Vulnerability Name	Name of the scanned vulnerability. Click a vulnerability name to view vulnerability description and vulnerability library information.
   Severity	Severity level of the vulnerability.
   ID	ID of the vulnerability.
   Affected Assets	Total number of assets affected by a vulnerability
   Vulnerability ID	ID of a vulnerability.
   Last Scanned	Time of the last scan
   Handled	This column specifies whether the vulnerability has been handled.