Review Current Vulnerabilities

Go to Network > Vulnerabilities and you'll see all current vulnerabilities and potential vulnerabilities on all IPs in your account. Use filters to limit the number of vulnerabilities shown.

Which vulnerabilities do I have to fix?

You'll see next to each vulnerability that must be fixed to pass PCI compliance. The PCI compliance service uses CVSS version 3.1 base scores and other criteria to determine the PCI pass/fail status. Learn more

Tell me about the vulnerability types

Download a CSV report

Click Download All to get a CSV report of your current vulnerabilities list. The report includes all current vulnerabilities and potential vulnerabilities on all hosts. Results are not filtered, even if you've selected filter settings.

Tell me about false positive indicators

You may see one of these indicators for a vulnerability that has been marked as a false positive.

false positive request was submitted

false positive request was rejected

false positive request was approved but expired after 90 days. You must submit a new false positive request for this vulnerability to pass PCI compliance.

Tip - A vulnerability that is currently approved as a false positive will not appear on the Current Vulnerabilities list.

How to review false positives

Select vulnerabilities from the list using the check boxes and then click the Review False Positives button to review vulnerability details and submit false positive requests. Learn more