Use security issues

Security issues are used to identify all items detected during Cyberwatch security scans which are not vulnerabilities. The first source for security issues are the “Network targets and websites” scans. They can also be obtained from an asset analysis, such as security issues regarding OS obsolescence or an application obsolescence.

Cyberwatch allows you to create “custom” security issues and affect them to your assets. This feature can be used, for instance, to:

  • import data from a security audit / penetration test;
  • import the results of a third-party security software with our API.

Create a Security issue

From an asset page:

  1. Click on Inventory
  2. Click on the affected asset name
  3. In the page dedicated to the asset, click on the “Security issues” tab
  4. Click on Add a new security issue

From a CVE page:

  1. Click on Vulnerability Encyclopedia
  2. Click on the concerned CVE
  3. On the CVE page, click on “Actions”
  4. Click on “Add a new security issue”

  5. Complete the fields of the form:

    • Reference: reference of the security issue (e.g. the reference of a penetration test report, or from a third-party security software)
    • Title: title of the security issue
    • Description: description of the security issue
    • Severity: severity of the security issue
    • Assets: list of assets affected by the security issue
    • CVEs: list of CVE announcements related to the security issue
  6. Save

If the fields have been correctly set, the security issue will appear in the list of security issues.

Moreover, the CVEs specified in the CVEs field will also be affected to the asset, and will be displayed in the ‘Vulnerabilities’ tab.

Edit a Security issue

  1. Click on Inventory
  2. Click on the affected asset name
  3. In the page dedicated to the asset, click on the “Security issues” tab
  4. Click on the edit button (pencil icon) corresponding to the security issue to edit
  5. Modify the desired fields in the form. Unedited fields will keep existing values
  6. Save

Delete a Security issue

  1. Click on Inventory
  2. Click on the affected asset name
  3. In the page dedicated to the asset, click on the “Security issues” tab
  4. Click on the delete button (bin icon) corresponding to the security issue to delete
  5. Confirm

Delete multiples Security issues

  1. Click on Inventory
  2. Click on the affected asset name
  3. In the page dedicated to the asset, click on the “Security issues” tab
  4. Select the security issues you want to delete
  5. Click on the “Bulk actions” button to display the different options
  6. Click on the “Delete the selected security issues” button
  7. Confirm

Severity rate

Cyberwatch assigns a severity rate to each of its security issues. This rate is ranging from informative to critical. This severity rate is elaborated by Cyberwatch and depends on the issue type, the risk it represents and the impact it may have.

Put differently, the severity rate of a security issue is relative to its danger. For example, due to it higher impact level on a system, an “OS obsolescence” issue type has a higher severity rate than an “Application obsolescence” one.

See all security defaults list

Back to top