Unified VRM includes two report types: System Reports and User-Defined Reports.
System Reports
System Reports are pre-defined reports that appear at the top of the Infrastructure Vulns Reports main page.
- System Reports can be customized and saved as new reports, or run using the default parameters.
- System Reports cannot be deleted.
- Anyone in your organization with a Unified VRM account can view or run these reports, depending on their permissions.
|
Report Name |
Purpose |
Filters |
|
Exceptions Tracking Report |
Find all vulnerability instances that are false-positives or risk accepted in Unified VRM, grouped by Vuln Instance. |
Vuln Status: FALSE-POSITIVE,RISK-ACCEPTED Group By: Vuln Instance |
|
Threat Risk Vuln Instances |
Find all open vulnerability instances with active malware or otherwise being exploited, grouped by Vuln Instance. |
Threat: True Vuln Status: Open Group By: Vuln Instance |
|
Highest Risk Vulnerabilities |
Find all open Critical, Urgent, and High vulnerabilities. |
Vulnerability-grade: Critical,Urgent,High Group By: Vuln |
|
New Vuln Instances <30 Days |
Find all open vulnerability instances that were detected fewer than 30 days from the date the report is run. |
Age:< 30 Group By: Vuln Instance |
|
Overdue Vuln Instances |
Find all open vulnerability instances that are overdue*. |
Overdue: True Vuln Status: Open Group by: Vuln Instance |
*A vulnerability is considered overdue when the difference between the current date and the detection date is greater than the detection date plus the SLA time frame the vulnerability’s risk level.
User-Defined Reports
User-Defined Reports are reports that have been created and saved by a person in your organization.
User-Defined Reports appear below the System Reports on the main page of the Infrastructure Vulns Reports section.
Anyone in your organization with a Unified VRM account has access to these reports. See Reports Permissions for more information.