Viewing Issues in Netsparker Enterprise

List

Description

To Do

This window displays a list of all the Issues that have been assigned to you. You can take action by fixing them, assigning them to someone else or changing their status.

The number next to the menu name indicates how many outstanding items you have on your To-Do list.

In the Status column for each newly identified vulnerability, it will read Present. Once you click Retest, it will change to Fixed (Unconfirmed).

Waiting for Retest

This window displays a list of all Issues whose State has been updated to Fixed (Unconfirmed). They are waiting to be tested automatically by Netsparker Enterprise.

Addressed Issues

This window displays a list of all the Issues that have been addressed and whose State has been updated to one of the following:

• Accepted Risk: Indicates that the Issue has been considered and is marked as a low risk vulnerability
• False Positive: Indicates that the Issue has been considered and is marked as not a genuine vulnerability
• Fixed (Confirmed): Indicates that the Issue has been fixed and confirmed by Netsparker Enterprise, and so requires no further action

Users with Manage Issues (Restricted) permission can only mark an Issue’s state as 'Fixed (Confirmed)'.

All Issues

Field

Description

Title/Issue

This is the name of the vulnerability, such as Internal Server Error.

Some issues are grouped, meaning they are reported only once per website. This help text is displayed in the Details window.

Severity

This is the vulnerability severity level. The options are:

• Critical
• High
• Medium
• Low
• Information
• Best Practice

For further information, see Vulnerability Severity Levels.

Website/
Website Name

This is the name of the scanned website.

URL/Issue URL

This is either the website address of the scanned website or the URL of the detected issue.

First Seen

This is the date and time the issue was first detected.

Last Seen

This is when the issue was most recently detected.

Issue Tags

This is the label given to an issue to group and/or give additional context. For further information, see Tagging issues in Netsparker Enterprise.

Assignee

This is the name of the person who has been assigned the task. It may be:

• The Technical Contact for the scanned website
• The Team Member who initiated the scan
• Any other member of the team

Status

This indicates the current status of the issue. All Issues are initially marked as Present.

• Present
• Accepted Risk
• False Positive
• Fixed (Unconfirmed)
• Fixed (Confirmed)
• Fixed (Can't Retest)
• Ignored
• Present
• Revived
• Scanning

For further information, see Addressed Issues and Issue Lifecycle.

State

This indicates the current state of the issue. The state levels are explained as follows: 

• New – This indicates that this issue has been identified for the first time.
• Not Found – This indicates Netsparker had not found this vulnerability in that scan
• Not Fixed – This indicates the vulnerability has not been fixed.
• Fixed – This indicates the vulnerability has been fixed. 
• Revived – This indicates that the issue had been fixed in previous scans but revived again.

Retestable

This indicates whether the issue can be retested.

Addressed

This indicates that issues have been addressed or whose State has been updated.

Opened By

This indicates who identified issue(s).