I have an issue right now where 2 scans using the same profile are not returning the same results. I'm not a power user (yet) but I know my way around...
The details: We have a scheduled scan that runs weekly against our servers and uses a profile , we'll call it Profile A. The scan is specific to Severity 3 confirmed vulnerabilities, and it is authenticated. It works, and returns multiple vulnerabilities every week.
If we run an On Demand scan against one specific server for all Severities using Profile A, the Severity 3 vulnerabilities do not match between the two reports.
I need some direction on what to look at to determine what is producing different results between the two.
Thanks in advance.