---
title: "Add Vulnerability  "
url: "https://docs.indusface.com/en/article/add-vulnerbaility-mssp-consultant"
language: "en"
last_updated: "2025-10-09T09:45:41.955Z"
---

# Add Vulnerability  

Provides the option for consultants to manually add new vulnerabilities into the platform’s database. This ensures flexibility to capture findings that may not be identified through automated tools. 

## Accessing Add Vulnerability Item 

-   Navigate to WAS MSSP Consultant Admin  
-   Click Add Vulnerability 

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/9cb18b96-cc43-4778-97a9-363f95e70e53) 

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/24d07c9b-17b9-4269-a642-5d8b254c3e4a) 

| **Field** | **Purpose** | **Example Entry** |
| --- | --- | --- |
| Vulnerability Title | Title to identify the vulnerability. | SQL Injection in Login Page |
| Vulnerability Name | Name/type of issue you are reporting. | SQL Injection |
| Severity | Risk level based on business and technical impact. | Critical |
| Description | Summary of the vulnerability and technical background. | “Login form does not validate input, allowing SQL injection.” |
| References | Links or references for more information. | OWASP SQL Injection Guide |
| Solution | Recommended remediation steps. | “Use parameterized queries and input validation.” |
| Complexity | Effort or skill required to exploit. | Low |
| CVSS Base | Base score according to CVSS standard. | 9.1 (Critical) |
| CVE ID URLs | URLs of related CVE entries. | [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12345](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-12345) |
| CVSS Score | Severity rating based on CVSS standards. | 9.1 (Critical) |
| CVSS Vector | Breakdown of CVSS metrics. | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| PCI DSS | PCI requirement this vulnerability impacts. | Req. 6.5.1 – Input Validation |
| CVSS Version | CVSS standard version used. | 3.1 |
| CWE ID | Weakness category ID from CWE database. | CWE-89 (SQL Injection) |
| OWASP Category ID | Mapping to OWASP Top 10 categories. | A03:2021 – Injection |
| Scanner Type List | Scanner or tool that detected the vulnerability. | Acunetix, Burp Suite |

-   Click **Save** to save the entered vulnerability details and updates the database. 
-   Click **Cancel** to discard any changes and return to the previous screen without saving. 

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/e7738f3d-a22d-49e1-b065-79f3242109fd) 

> The added vulnerability can then be selected from the database when adding a new vulnerability to an application. 

WAS MSSP Consultant Admin -> Manual Scan->Add New 

Refer to the [**Manual Scan document, Add New section**](https://docs.indusface.com/en/article/manual-scan-mssp-consultant) to learn more.  

![A screenshot of a computer  AI-generated content may be incorrect.](https://cdn-assets.productfruits.com/929eba3d-2ce2-4401-8fcc-29980f443b96)