Risk Rating

Each vulnerability has a risk rating assigned. The following is a description of the different categories.

To read these ratings together with the coverage and evidence behind each finding, see Understand Scan Results.

1. Critical

Critical vulnerabilities pose a severe threat to the system's security. Exploitation of these vulnerabilities could lead to significant damage, leakage of sensitive data, or complete system compromise.

2. High, Medium and Low

High, Medium and Low vulnerabilities are confirmed vulnerabilities with different scores that consider the impact and complexity.

3. Hardening

Hardening findings highlight the absence of security measures that could prevent or mitigate the impact of certain vulnerabilities. This indicates a need for implementing security measures to enhance the overall security of the system.

4. Potentially

Potentially findings are unconfirmed vulnerabilities that may depend on context and usage.

5. Secure

Secure findings indicate that tests confirm the absence of the vulnerability or the successful implementation of security measures.

6. Important, Info

Important and Info are informative findings that can help with manual assessment, understanding of application behavior or confirming certain aspects of the application, like using a certificate to sign the application.