Reading the VMDR Prioritization Report

Depending on the asset tags that you choose, the assets are identified for this report. Prioritized Assets is the count of assets out of the total assets with vulnerabilities that meet the combination of the detection age, RTIs, and attack surface you selected.

In the above example, 208 assets matched the selected asset tags. Out of the 208 assets, 83 assets have vulnerabilities that met the combination of the selected Detection Age, RTIs, and Attack Surface.

The Prioritized Vulnerabilities section displays a summary of prioritized vulnerabilities that are detected on the assets.

Instances: The count indicates the total number of vulnerabilities that meet the combination of the detection age, RTIs, and attack surface you selected.  

The count may include multiple occurrences of a single vulnerability (that is a single QID) detected on multiple assets.

In the above example, 3.17K vulnerabilities were detected. Out of the 3.17K vulnerabilities, 301 vulnerability instances met the combination of the selected detection age, RTIs, and attack surface across the 208 assets.

Unique: The count of unique vulnerabilities (excluding duplicate QID instances) out of the vulnerability instances identified/detected.

In the above example, out of the 301 instances, 87 are the unique vulnerabilities.

Count of the patches that are available with Qualys. Click Patch Now to initiate the process of patching the vulnerabilities.

Click Details link to view details such as number of vulnerabilities that will be fixed with the available patches, number of assets on which the vulnerabilities is detected and can be fixed with the patches.

Assets: The count of assets on which the vulnerabilities can be fixed with the available patches. Click on the count to view all the assets in Assets tab below.

Vuln Instances: The count is the total number of vulnerabilities that meet the combination of the detection age, RTIs, and attack surface you selected that can be fixed with the available patches.

Unique Vuln: The count of unique vulnerabilities (excluding duplicate QID instances) that can be fixed with the available patches. Click on the count to view all the unique vulnerabilities in the Vulnerabilities tab below.

Note: The Patch Now button is enabled only when Qualys can automatically patch the  vulnerability and the Patch Management app is enabled in your subscription.

You could choose to perform one of the 3 actions:

Add to New Job - Opens the wizard to create a new job in the Patch Management module. Follow the instructions in the wizard and initiate the patching process by creating a new job.

Add to Existing Job - Displays the list of existing jobs in the Patch Management app. Choose from one of the existing jobs (disabled state) and click Add. You can add maximum 200 patches to a single job. You cannot add patches to OnDemand or run-once (non recurring) jobs, once they are enabled.

View Missing Patches - Displays the list of missing patches for the prioritized assets and vulnerabilities. In case you have a free version of Patch Management then you can only view the list of missing patches. You will need to upgrade to the paid version of Patch Management app to initiate deployment job workflows from the Patch Now option. Show me

For more information, refer to the online help of the  Patch Management app.

You can  search with multiple criteria in a single go.

Start typing in the Search field and we'll show you the properties you can search such as vulnerability severity, detection age, etc. Select the one you're interested in.

Click the + sign for a combined Vulnerability and Asset search.

Start typing and we'll show you the asset properties you can search like agentId, agent version, etc. Select the one you're interested in.

Now, enter the value you want to match, and press Enter. That's it! Your matches will appear in respective tab.

Once you have your search results ready, you may want to organize them further into logical groupings. We offer several group by options such as detection age, vulnerability age severity and more.

You'll see the number of unique groupings based on your selection (e.g. 6 unique vulnerabilities) and the number of vulnerabilities per group. Click on any grouping to update the search query and view the matching vulnerabilities.