AnsweredAssumed Answered

FEATURE REQUEST:  Patch Available Flag in CSV Format Output

Question asked by DMFezzaReed Employee on Sep 16, 2015
Latest reply on Jul 23, 2018 by Ian Glennon

 

Today, when I down raw scan results or report in CSV format, there is no column provided to indicate if a patch is available or not.  I don’t understand why this information is available in PDF, in search functions, and in the GUI but not in CSV format.

 

 

 

 

 

A column likened to “PCI VULN”, PATCH AVAIL could be created with a Y or N.  It seems to me that this should be there, and I thought it was, but alas it is not.  I am unable to produce the level of detail for reporting that is required, which is to include zero day, configuration and patch available indicators and grouped charts without running 2 reports, then make an assumption that:  total vulns – (patchable + zero day) = configurable, or running yet another macro to perform vlookup or match to compare the 2 reports them against each other, and then I still have to do the math….unless, of course, you can recommend another way that is.

 

 

 

Columns available in CSV format today:

 

 

 

IP

DNS

NetBIOS

OS

IP Status

QID

Title

Type

Severity

Port

Protocol

FQDN

SSL

CVE ID

 

 

 

Vendor Reference

Bugtraq ID

CVSS Base

CVSS Temporal

Threat

Impact

Solution

Exploitability

Associated Malware

Results

PCI Vuln

Instance

OS CPE

Category

 

 

 

Or…

 

 

 

IP

DNS

NetBIOS

Tracking Method

OS

IP Status

QID

Title

Vuln Status

Type

Severity

Port

Protocol

FQDN

SSL

First Detected

Last Detected

Times Detected

 

 

 

CVE ID

Vendor Reference

Bugtraq ID

CVSS

CVSS Base

CVSS Temporal

CVSS Environment

Threat

Impact

Solution

Exploitability

Associated Malware

Results

PCI Vuln

Ticket State

Instance

OS CPE

Category

 

 

 

Outcomes