Updated on 2025-01-20 GMT+08:00

Viewing Vulnerability Details

Scenario

This topic describes how to view vulnerabilities details.

Prerequisites

  • You have installed HSS agent. For details, see the Host Security Service User Guide.
  • HSS logs have been connected to SecMaster and the function of automatically converting logs into alerts has been enabled. For details, see Data Integration. If access to HSS vulnerability scan results has been enabled during data integration but the automatic alert conversion is disabled, the vulnerability scan results will not be displayed on the Vulnerabilities page in SecMaster.

Viewing Vulnerability Details

  1. Log in to the management console.
  2. Click in the upper part of the page and choose Security > SecMaster.
  3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.

    Figure 1 Workspace management page

  4. In the navigation pane on the left, choose Risk Prevention > Vulnerabilities.

    Figure 2 Accessing the vulnerability management page

  5. View vulnerability information on the Vulnerabilities page.

    Table 1 Viewing vulnerability information

    Parameter

    Description

    Vulnerability Type Distribution

    This graph displays the total number of vulnerabilities and the distribution of vulnerabilities by type.

    Top 5 Vulnerabilities

    • The Top 5 Vulnerabilities area lists the five vulnerabilities with the most affected assets. The more affected assets, the higher the vulnerability ranking is.
    • The Vulnerability ID tab displays the IDs and the affected asset quantity for the five vulnerabilities.
    • The Vulnerability Type tab displays the names, severity levels, and affected asset quantity for the five vulnerabilities.

    Top 5 Vulnerable Resources

    This graph displays the five resources with the most vulnerabilities.

    Vulnerability List

    • In the vulnerability list, click the tab of a vulnerability type (for example, Linux Vulnerabilities) to go to the corresponding page. For details about the vulnerability parameters, see Table 2.
    • To view details about a vulnerability, click the vulnerability name and view the details on the page displayed on the right.
    • You can view the total number of vulnerabilities below the vulnerability list. You can view a maximum of 10,000 vulnerability records page by page. To view more than 10,000 records, optimize the filter criteria.
    Table 2 Vulnerability parameters

    Parameter

    Description

    Vulnerability Name

    Name of the scanned vulnerability.

    Click a vulnerability name to view vulnerability description and vulnerability library information.

    Severity

    Severity level of the vulnerability.

    Vulnerability ID

    ID of the vulnerability.

    Affected Assets

    Total number of assets affected by a vulnerability

    Vulnerability ID

    ID of a vulnerability.

    Last Scanned

    Time of the last scan

    Handled

    This column specifies whether the vulnerability has been handled.