Custom Report help: only want certain CSVV2 levels reported

jpalmer

Hey everyone!

I'm trying to see if there's a way to modify the report that's in SW for 'Vulnerabilities for each node' that shows all the knowns CVE Vuln's for the devices.

I'm trying to get this to report only on certain severities; for this report I'm trying to get levels 8-10 only.  I'm not seeing a simple way to do this, and I think I may be missing something obvious or simple.

Is there an easy way to do this?  Or has someone already done a report like this they can share the setup on?

foonly

Sure!

Make a Custom Report that uses the Dynamic Query Builder.

1. Make a copy of the existing Vulnerabilities for Each Node Report.

2. Edit the copy (opens for editing automatically when you 1st copy).

3. Click Edit next to the box named "For" Vulnerabilities for each node:

4. Click the + sign, and select Add Simple Condition to get:

5. Click Select Field, scroll down to Vulnerabilities Announcements, and select CVSS v2 Base Score, and click the ADD COLUMN button:

6. Then select "greater than or equal to", and enter the numeral, 8 in the box:

7. Click ADD TO LAYOUT, and then click NEXT, NEXT, NEXT ... all the way out. You can edit any of the report definition later - give it a nice title, add it to your own group of custom reports, etc.

Note that CVSS V2.0 Base scores do not always match the CVSS V3.0 Base scores that Cisco now reports in their bulletins.

If you haven't already, please vote up my Feature Request to add CVSS V3.0 Base scores:

=seymour=