1. What is "First Detected" and "Last Detected" date?
If a QID is detected for the first time (1st Scan) it will be shown in the the "First detected" column.
Now, if the same QID was only detected once and later it was never detected for e.g. the port where the QID was detected was later closed, so the status of "Last detected" and "First detected" date will be same.
If the same QID is detected again in the next scan (2nd Scan) then the last detected date will change to the date when the 2nd Scan was launched or 2nd time the scanner identified the port as open and detected the same QID again.
2. What is "Times Detected"?
The count under "Times Detected" will show how many times the QID is flagged.
3. What is "Last Fixed"?
The "Last Fixed" will show when was the last time the QID was identified as Fixed.
Following are the Vulnerability Status levels:
--> New - The first time a vulnerability is detected by a scan the status is set to New.
--> Active - A vulnerability detected by two or more scans is set to Active.
--> Fixed - A vulnerability was verified by the most recent scan as fixed, and this vulnerability was detected by the previous scan.
--> Re-Opened - A vulnerability was reopened by the most recent scan, and this vulnerability was verified as fixed by the previous scan. The next time the vulnerability is detected by a scan, the status is set to "Active".
4. What is "First Reopened", "Last Reopened" and "Times Reopened" details?
As per the above Vulnerability Status levels, when a QID was "Fixed" and was again flagged (means the vulnerability was found again after the fix) for the first time then it will show the Date in "First Reopened". Now, if the same QID gets fixed and again was "Reopened" in subsequent scan then the details of "Last Reopened" date will get updated and how many times the QID was "Reopened", that count will show under "Times Reopened".
Please refer the below link for more information:
https://success.qualys.com/support/s/article/000003327
Happy Learning !!
No comments:
Post a Comment