Import Findings for a Vulnerability Assessment

Introduction

A User can upload scan results to an Assessment to automatically populate the Vulnerabilities and Targets.

Step-by-Step Guide

1. Navigate to the “Assessments” page

2. Select an Assessment and open its details

3. Click the “Import Vulnerabilities” button

4. Select the type of scan from the drop-down menu

5. Click the “Browse” button and select a CSV file to upload

6. Click the “Import” button and wait for the Findings to import

Scanner Import Files

The following types of imports are imported and must have matching columns

Nessus

• CVE

• CVSS

• Host

• DNS Name

• Risk or Severity

• Protocol

• Port

• Name or Plugin Name

• Solution

• Synopsis

• Plugin ID or Plugin

OpenVAS

• CVEs

• CVSS

• Severity

• IP

• Hostname

• Port Protocol

• Port

• NVT Name

• NVT OID

• Impact

• Solution Type

• Summary

Rapid7

• Vulnerability CVE IDs

• Asset IP Address

• Vulnerability Severity Level

• Service Port

• Vulnerability Title

Qualys

• CVEs

• Type

• Severity

• IP

• DNS

• Protocol

• Port

• Title

• Impact

• Solution

• Results

Video Tutorial