Skip to main content

Vulnerabilities

The Vulnerabilities page displays all the vulnerable applications discovered on devices in your environment during scanning. It provides detailed info of their level of severity, number of known CVEs per application, and number of affected devices.

era_vulnerabilities_937397_en.png
  1. The Smart views panel toggle button. This feature allows you to customize, save, and switch between different loadouts of the Vulnerabilities page.

    era_vulnerabilities_smart_views937397_en.png

    The panel has the following sections:

    • Search views - Use this search field to filter out the views displayed in the sections below, by name.

    • Saved - This section displays a list of all your saved views that have not been marked as favorites.

    • Favorites - All views marked as favorites are displayed under this section.

    • Defaults - This section displays the views that are available by default:

      • All Vulnerabilities

      • High severity

      • Ignored

      • Watchlist

    For any view in the Saved or Favorites category, you can click the vertical ellipses ellipses.PNG to Rename or Delete the view.

  2. The Vulnerability actions. This section contains the buttons to all the available actions you can take on the risks displayed on the page:

    • State - Change the state of the selected risks. The following options are available:

      • Ignore risks

      • Restore ignored risks

    • Watchlist - Add or removed the selected risks from your watchlist. The following options are available:

      • Add to watchlist

      • Remove from watchlist

    • Scan - Perform a scan to check for new risks or updates on known risks.

  3. The Filters section. You can use these options to customize the risks that are displayed in the below grid.

    The following filters are currently available:

    Filtering option

    Details

    Application name

    Use the searchable drop-down menu to filter the list of applications by name. Select the applications you want to display and click Apply.

    Only the selected applications are displayed.

    Risk score

    Select a risk score range between 1 and 100.

    Only applications with a risk score between these values are displayed.

    CVE code

    Use the searchable drop-down menu to filter the list of Common Vulnerabilities and Exposures (CVEs) by name. Select the CVEs you want to display and click Apply.

    Only applications affected by the selected CVEs are displayed.

    Device name

    Use the searchable drop-down menu to filter the list of devices by name. Select the devices you want and click Apply.

    Only vulnerable applications that have been detected on the selected devices are displayed.

    OS

    Use the searchable drop-down menu to filter the list of devices by operating system. Select the operating systems you want and click Apply. Possible values:

    • Unknown

    • IOS

    • Android

    • Windows

    • Linux

    • Solaris

    • Mac OS X

    • Container

    Only vulnerable applications that are present on the selected operating systems are displayed.

    Application type

    Select the type of applications you want to display. Possible values:

    • OS

    • Application

    Only applications of the type you select are displayed.

    State

    This column allows you to filter the list of indicators of risk by their status, Active or Ignored.

    Use the searchable drop-down menu to filter the list of devices by state. Select the states you want and click Apply. Possible values:

    • Active

    • Ignored

    Only Vulnerabilities with the states you selected are displayed.

    Exploits

    Use this filter to display applications that have vulnerabilities that have existing exploits, ones that don't, or both.

    Targets your industry

    Use this filter to display applications that have vulnerabilities that are actively exploited in your industry, ones that don't, or both.

    Affected Device

    Use the searchable drop-down menu to filter the list of device types by name. Select the devices you want and click Apply.

    The following values are available:

    • Endpoint

    • Server

    • Not affected

    Only vulnerable applications affecting the selected device types are displayed.

    In watchlist

    Use this filter to display vulnerable applications based on them currently being included in a watchlist. Possible values:

    • Yes

    • No

  4. The View options menu. This section provides you with multiple functions for working with views:

    • Save - Save changes you make to a saved view.

    • Save as - Save a modified view under a different name.

    • Discard changes - Revert the saved view to its original state.

    • Add to favorites - Add the view to the Favorites category.

    • Export view - Download the information in a .csv file.

    • Show or hide filters - Hide or display the filters menu.

    • Open settings - Display the Settings panel.

      You can use this panel to customize what columns are displayed in the view and enable or disable the Compact view.

  5. The Vulnerabilities grid. The grid displays all detected vulnerable Applications in your company, based on your last scan.

    The information available for each Applications displayed under the following columns:

    • Application name - The name of the application affected by vulnerabilities.

    • Risk score - The risk score of the application, based on the detected CVEs and vulnerabilities detected for each application, calculated as described in How the company risk score is calculated.

    • CVEs - The number of CVEs that apply to the Vulnerability.

    • Affected Devices - The number of devices where the vulnerable application is found on.

    • OS - The type of operating system where the vulnerable Application was detected.

    • Application type - The type of the application.

    • State - The state of the application.

    • Exploits - Indicates if there are any existing exploits for any of the vulnerabilities detected on the application.

    • Targets your industry - Indicates if any of the vulnerabilities detected for the application is actively exploited in your industry.

    • In watchlist - Indicates if the application is currently in the watchlist.

    Note

    More details regarding the information in each column are available in the Filters section.

  6. Actions button - Displays all the actions you can take on each application. Possible values:

    • Ignore application

    • Add to watchlist