Actions19
- Vulnerability Actions
- PII Actions
- Access Audit Actions
- Benchmark Actions
Vulnerability → Risk Assessment
AI-generatedSummary
Assess vulnerability risks within an organization by specifying risk score ranges, business impact, exploitability levels, and included risk factors to obtain detailed vulnerability risk scores and remediation priorities.
Inputs
- Risk Score Range — Specify the minimum and maximum CVSS V3 Base Score (between 0 and 100) to filter vulnerabilities by risk score range.
- Business Impact (required) — Select the impact level of the business systems affected by vulnerabilities (Critical, High, Medium, Low), which influences risk calculation.
- Exploitability Level (required) — Define the exploitability level of vulnerabilities (Active exploits, Proof of Concept, Theoretical), affecting risk assessment scoring.
- Include Risk Factors (required) — Choose one or more risk factor categories (Business Context, Exploitability, Asset Criticality) to include in the detailed risk assessment results.
- Limit — Optionally limit the number of vulnerability risk assessment results returned (default 100).
Output shape
a list of vulnerability risk assessment records
Each record includes overall riskScore, remediationPriority, and optionally detailed analyses of business context, exploitability, and asset criticality based on input settings. Returned records respect input filters and limit parameter.
Examples
Example 1: Evaluate vulnerabilities with CVSS scores from 5 to 9, high business impact, and active exploits, including all risk factors
Set Risk Score Range minimum to 5 and maximum to 9, Business Impact to High, Exploitability Level to Active, Include Risk Factors to all options, and adjust limit as needed.
Example 2: Assess critical business vulnerabilities with theoretical exploitability and include only business context and asset criticality factors
Set Business Impact to Critical, Exploitability Level to Theoretical, Include Risk Factors to Business Context and Asset Criticality, with no risk score range filtering (default full range)