Change Risk Rating

To change a vulnerability’s risk rating, open it from the scan, click the rating next to its title, pick the new rating, and click Confirm.

You can change the risk rating of a vulnerability when it doesn't match your context, for example when a vulnerability is more serious for your organisation than its default rating suggests. The new rating applies to every occurrence of that vulnerability in the scan.

1. Open the scan

Click Scans in the top bar, then open the scan where the vulnerability is listed.

2. Open the vulnerability

Find the vulnerability in the Vulnerabilities list and click it.

3. Click its risk rating

The risk rating is shown next to the vulnerability's title. Click it to open the list of ratings.

4. Select the new risk rating

The list goes from Critical to Info.

5. Confirm the change

Click Confirm. Every occurrence of this vulnerability in the scan is updated.

6. The new rating is applied

Return to the scan and open its Vulnerabilities list. The list now shows the vulnerability’s new rating, for example High instead of Medium.

The rating badge on the vulnerability’s own page may keep showing the previous rating until you reopen the finding.