Security Risk Analysis

The Daily Open Violation Counts chart displays the number of non-waived violations present each day across all applications matching the selected filters.  Open violations are broken out by threat level.

This chart does not include violations that are discovered and remediated on the same day.

The Mean Time to Remediate chart displays the mean time taken in days to remediate violations on a month-by-month basis. Remediating violations includes changing the component versions (by upgrading, downgrading, removing the component or fixing the vulnerability) or applying waivers.

The Fix Rate chart displays the percentage of violations resolved during the selected time period. Fixing violations includes changing the component versions (by upgrading, downgrading, removing the component or fixing the vulnerability.)

The Violations Over Time chart displays the number of violations (open, waived or both) as they exist on the last day of each month.

Critical Violations: Remediation Reason chart shows a breakdown of the number of critical violations that are open, waived, and fixed (by implementing a version change to a non-violating version of the component or removing the component.)

All Other Violations: Remediation Reason chart shows a breakdown of the number of all other violations (excluding criticals) that are open, waived, and fixed (by implementing a version change to a non-violating component or removing the component.)

The chart displays the fixed and pending violations for the top 10 most frequently occurring vulnerabilities (based on the number of applications they occur in.)

The distribution of the top ten violations that were fixed in the various applications gives an insight into the existing security risk. Since these Top 10 vulnerabilities occur in many applications, remediating them has high impact.  This chart shows how complete those remediation efforts are.  The blue bars show the count of successfully remediated vulnerability instances and the pink bars show the remediation work remaining.

Click on the CVEs on the X-axis to view the detailed description of the vulnerability. Ensure that the base url is configured for your instance of IQ Server to view the vulnerability details. You may observe a change in the severity for a given CVE. This is due to the change in the CVSS score that associated with the CVE, over the course of time.

The chart displays the number of vulnerabilities and the associated threat levels for the 5 applications that have the most total risk. Any business critical applications on this list are good targets for focused risk reduction efforts.”

The top 5 ranking of the Applications with Most Risk is determined by the combination of the threat levels and the number of vulnerabilities. There could be scenarios where the number of vulnerabilities are higher, but the application is not shown at a higher risk, in the the Top 5 rankings. This is because of the lower threat levels associated with the vulnerabilities.

The chart displays the vulnerabilities in your applications and is color coded by threat level. By determining the most commonly occurring vulnerabilities across your applications, you can direct your remediation efforts towards these vulnerabilities and reduce the risk efficiently. The number of applications displayed here shows the distinct count of the applications containing the vulnerability.

The top 5 ranking of the Most Common Vulnerabilities is determined by the combination of the number of vulnerabilities and impacts on the number of applications. There could be scenarios where the number of applications are higher, but the vulnerability is not shown higher in the the Top 5 rankings. This can happen if the vulnerability occurs in many applications but some of those occurrences have lower-severity impact.

Click on the CVEs on the Y-axis to view the detailed description of the vulnerability. Ensure that the base url is configured for your instance of IQ Server to view the vulnerability details.

The chart displays the 5 most commonly implicated components along with the associated threat levels. You can target remediation of "critical" and "severe" threat levels to optimize the remediation or risk reduction tasks.

The top 5 ranking of the Components with Most Risk is determined by the combination of the number of vulnerabilities and impacts on the number of applications. There could be scenarios where the number of applications are higher, but the component is not shown higher in the the Top 5 rankings. This is because the chart shows the number of applications that have been impacted by all threat levels that were associated due to changes of CVSS over the time period.

The chart displays the 5 most commonly found cataloged CWEs and the number of affected applications. You can remediate risks based on the weakness taxonomy, and the number of applications affected, by crafting a targeted approach that focuses on certain weakness types.

The top 5 ranking of the CWEs is determined by the combination of the number of CWEs and impacts on the number of applications. There could be scenarios where the number of applications are higher, but the vulnerability is not shown higher in the the Top 5 rankings. This can happen if the vulnerability occurs in many applications but some of those occurrences have lower-severity impact.

Click on the CWEs on the Y-axis to view the detailed description on cwe.mitre.org

NOTE: "Ø" indicates that no CWE has been officially assigned to the vulnerability because it is new or uncategorized.

This table shows a list of all vulnerabilities found in the latest application scans.

NOTE: Due to limitations of the data visualization platform, this table can show 5,000 rows only. This also applies to the exported data.