Vulnerabilities dashboard

The Vulnerabilitiesdashboard provides an overview of vulnerability events from device data and tracks the status and activity of the vulnerability detection products deployed in your environment. Use this dashboard to see the overall health of your scanning systems, identify long-term issues, and see systems that are no longer being scanned for vulnerabilities.

Dashboard filters

The dashboards displays a list of all vulnerability-related events based on the criteria defined by the search filters. The dashboard is used in ad-hoc searching of vulnerability data, but is also the primary destination for drilldown searches used in the dashboard panels.

Filter by Description
Time range Select the time range to represent.
Business unit A group or department classification for the identity.
Category Filter based on the categories to which the host belongs.
Destination Filter by vulnerability events and host metrics based on a specific target IP address or host name.
Signature Filter by vulnerability events and scan results to specific matching vulnerability names, IDs, or text strings.
Vulnerability category Filter by string value describing the specific type or class of a discovered security flaw, such as "DoS" (Denial of Service) or "Buffer Overflow".
Reference Filter by an interactive text input that is used to narrow down vulnerability findings based on external vulnerability identifiers or naming standards.
Severity Filter based on event severity.

Dashboard Panels

Panel Description
Top vulnerabilities Displays the most common issues reported by the vulnerability scanners. The reported issues are aggregated by host so that the chart represents the number of unique occurrences of the issue as opposed to the number of times the issue was detected (since scanning a single host multiple times will likely reveal the same vulnerabilities each time). The drilldown opens the Vulnerability Search dashboard and searches on the selected signature and time range.
Most vulnerable hosts Displays the hosts with the highest number of reported issues. The drilldown opens the Vulnerability Search dashboard and searches on the selected severity, host, and time range.
Vulnerabilities by severity Displays issues by the severity assigned by the vulnerability scanner. Helps identify trends that are not visible when looking at vulnerabilities individually. The drilldown opens the Vulnerability Search dashboard and searches on the selected severity and time range.
New vulnerabilities Displays the most recent new vulnerabilities detected as well as the date each one was first observed. Helps identify new issues appearing on the network that need to be investigated as potential new attack vectors. The drilldown opens the Vulnerability Search dashboard and searches on the selected signature and time range.
Scan activity over time Displays vulnerability scan activity by systems over time. Hover over item for details.