Vulnerability Management Overview (Explore)

The Vulnerability Priority Rating Using VPR (Explore) widget displays vulnerabilities grouped by Vulnerability Priority Rating (VPR). VPR is the output of Tenable's predictive prioritization process and is continually updated to accommodate the evolving threat landscape. Following the initial scan of an asset on the network, Tenable computes an initial VPR using a machine-learning algorithm that analyzes more than 150 different aspects of each vulnerability to determine the level of risk. Vulnerabilities are listed on the left have the highest VPR, while those on the right have the lowest. The requirements for this widget are: Tenable.io Vulnerability Management (Nessus, NNM).

The Severity Statistics by Source (Explore) widget provides a count of vulnerabilities collected through multiple sources: Nessus scan, Nessus Agent, and Frictionless Assessment. Nessus Agents are low-footprint programs installed locally on hosts to supplement traditional network-based scanning. Nessus Agents collect vulnerability, compliance, and system data, which is reported to management for mitigation guidance. Frictionless Assessment assesses the hosts for vulnerabilities in the cloud, rather than running plugins locally on the hosts. The numbers displayed in this widget use severity to identify precedence of vulnerabilities to be mitigated. The requirements for this widget are: Tenable.io Vulnerability Management (Nessus, NNM, AWS Frictionless Assessment, Azure Frictionless Assessment).

The Scan Health (Explore) widget provides a summary of scan health in relation to authentication success and failures. System and network devices must be routinely scanned to ensure they are operating in compliance with organizational and regulatory requirements for vulnerability and configuration management. Evidence of scanning activities is often required by regulatory frameworks and Service Level Agreements (SLAs). Credentialed scanning, which requires authentication to the device, provides the most accurate scanning results. The five columns display asset counts related to: Authentication Success - Scans authenticate successfully with full administrator/root privileges. Scan results will be the most comprehensive. Success but Insufficient Access - Scans authenticate successfully, but do not have privileged access. Scan results will be limited to what a local non-privileged user could see. Success but Intermittent Failure - Scan credentials intermittently fail, which could be caused by session rate limits, session concurrency limits, or other issues preventing consistent authentication success. Authentication Failure (Credentials) - The credentials provided were incorrect. No Credentials Provided - No credentials were provided. The requirements for this widget are: Tenable.io Vulnerability Management (Nessus, NNM).

The Critical and High Exploitable Vulnerabilities (Explore) widget focuses on the most severe current threats, critical and high exploitable vulnerabilities to help prioritize remediation. Each bar represents vulnerabilities grouped by an exploitability characteristic. Exploited by Malware: Vulnerabilities that can be exploited by malicious software, such as viruses, worms, spyware, adware, and ransomware. Remotely Exploitable (Low Complexity): Vulnerabilities that can easily be exploited remotely and require little skill or information gathering to exploit. Locally Exploitable (Low Complexity): Vulnerabilities that can easily be exploited with local access and require little skill or information gathering to exploit. Exploited by Framework (Metasploit): Vulnerabilities for which exploit code has been imported into various exploit frameworks when the vulnerability is made public. Common exploit frameworks, such as Metasploit, are easy to obtain and are used by security researchers and malicious attackers. Remotely Exploitable (High Complexity): Vulnerabilities that can be exploited remotely, but require a high degree of skill and information gathering to exploit. Note that these groupings are not mutually exclusive, a single vulnerability can be included in multiple exploitability categories. Tenable recommends prioritizing remediation starting with vulnerabilities in the left-most column, 'Exploited by Malware.' The requirement for this widget is: Tenable.io Vulnerability Management (Nessus).