--- title: "Vulnerability Assessment" url: "https://docs.indusface.com/en/article/vulnerability-assessment" language: "en" last_updated: "2025-02-21T09:06:48.560Z" --- # Vulnerability Assessment This tab displays various reports of **Vulnerability Assessment** scans from **Top Threats Identified During Last Scan** to **Threats Identified During Last 5 Days** in the form of various graphs. List of **IP Address** registered with Vulnerability Assessment is displayed with **Scan Status**. This widget is displayed for **All Sites** only. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555917765961/image.png) #### Scan Status Click **Scan Status** button to view the scans and services that are active or inactive. **Scan Status** pop-up appears. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555920218747/image.png) The **Scanned Websites** with **Vulnerabilities Found**, **Status** of the scan and **Action** column is displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/ytblbqbsrr/1555915126680/image.png) | **Parameter** | **Description** | | --- | --- | | URL | The URL of the scanned websites is displayed in this column. | | Vulnerability Found | The count of the vulnerabilities found from an application is displayed in this column.
Click **Download CSV** link to display the data in the respective format. | | Status | This column displays if a scan service is **Inactive** or **In progress**. | | Action | This column displays **Start** button for active services and **Pause** and **Stop** button for in progress scans. | ### Web Applications By default, scan details of **All Sites** is displayed for **VA** page. There are 2 other options i.e., **In Site(s)** and **In Group(s)**. #### In Group(s) Click **Web Applications** drop-down and click **In Group(s)** option to display the existing groups subscribed with **VA** scans. **Select Group** drop-down appears. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1531982874700/image.png) Click **Select Group** drop-down, click to select a specific group. VA page of the selected group is displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1531984019681/image.png) If the selected group is not subscribed for **Vulnerability Assessment** service, **Dashboard** page appears. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555919694559/image.png) \[OR\] **List of IP Address** in the group and various other VA scan reports of the selected group are displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555919849625/image.png) #### List of URLs  - This widget displays the **Website URLs** registered for **Vulnerability Assessment scan** and their **Scan Status**. - Scan Status is displayed  ![](https://files.helpdocs.io/1fZENFEEfs/articles/qi9bVKR3vH/1520919524673/image.png), if your **Vulnerability Assessment\[VA\]** has passed last Indusface WAS Security Scan. It does not have any critical alert. - Scan Status is displayed  ![](https://files.helpdocs.io/1fZENFEEfs/articles/qi9bVKR3vH/1520922967550/image.png), if **Indusface WAS** security scan is running or not yet started your VA service. - Scan Status is displayed  ![](https://files.helpdocs.io/1fZENFEEfs/articles/qi9bVKR3vH/1521006741264/image.png), if there is one or more critical alert found in last VA scan. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1532288913568/image.png) #### In Site(s) - This option helps a user to display a specific site from the websites registered with VA scans. - Click **Web Applications** drop-down, click **In Site(s)** option. **Select Asset** option displays. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1531991345951/image.png) Click **Select Asset** drop-down, click to select any one of the existing assets. The VA scan details of the selected assets are displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1531993417578/image.png) The VA scan details of a specific asset with general information of an asset are displayed. Customer Asset ID is displayed if created otherwise N/A(nil) is displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555926006236/image.png) #### Customer Asset ID Click edit customer asset ID option to create or update a short name for an Asset. **Edit Customer Asset ID** pop-up appears. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555926418750/image.png) Click **Customer Asset ID** box, enter an unique ID and click **Submit** button. The updated ID is displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1532003755322/image.png) #### General Info This displays the basic information of a website or the selected Asset like **IP Address**, **Last Scan**, **Remaining POC** etc. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1531996752329/image.png) #### Open Services Found in Last Scan The ports that are open during the last scan on the scanned IP address are displayed in this option. Open service details like **Protocol**, **Port**, **Service Name**, and **Product Name** are displayed. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1531997393129/image.png) #### Scan Summary - This option displays the scan details like **Scan Date**, **Vulnerability Type**, **Total Vulnerabilities**, and **Seal Status**. - Click **PDF** or **Excel** icon in **Downloads** option to download the report of a specific scan. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555927911705/image.png) #### Threats Identified During Last Scan - This widget displays the threats found in last scan as **Critical**, **High**, **Medium**, and **Low** according to severity in the form of a pie chart. - Click  ![](https://files.helpdocs.io/1fZENFEEfs/articles/qi9bVKR3vH/1521008139905/image-01.png)to download the report in **CSV** format. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555929755337/image.png) #### Open Status Identified During Last Successful Scan - Three kinds of open statuses are available with a unique colour i.e., **Re-open**, **Open**, and **New**. - The number of vulnerabilities found in a specific status is displayed in the pie-chart. Mouse over a specific status in the pie chart to view the percentage. ![](https://files.helpdocs.io/1fZENFEEfs/articles/qokecvk5ks/1555575091091/image.png) #### Aging Summary This option displays the vulnerabilities open for last 30 (or) 90 (or) 180 days. An application is vulnerable even after re-validation cycle. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555932566466/image.png) | **Parameter** | **Description** | | --- | --- | | Label | This option displays the number of days a vulnerability is open for ageing summary. | | Critical | This option displays the number of critical vulnerabilities open for the respective days. | | High | This option displays the number of high vulnerabilities open for the respective days. | | Medium | This option displays the number of medium vulnerabilities open for the respective days. | Click the number in respective vulnerability category (i.e., critical, high or medium) to view the further details. **Vulnerability Assessment Details** pop-up appears. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555935360455/image.png) The Unique Alert ID, URL, Title of the vulnerability, and Severity of the open vulnerabilities is displayed. The general Description and Solution is displayed on the side. Click **Show More** button of a specific open vulnerability to view further details like IP address, references, etc. ![](https://files.helpdocs.io/1fZENFEEfs/articles/x43eesvj84/1555935453002/image.png)