to846779 (Community Member) asked a question.

What does mean the plus sign next to the number of vulnerabilities?

Reading the "Flaw Types by Severity and Category", i see some Medium "5", 5 vulnerabilities in total of Medium category, and "(-18)" next to the number. I interpreted that i have 5 vulnerabilities today and 18 have been fixed from the last scan 18. But i also see "3" vulnerabilities founded in the Dynamic Scan and the "(+3)" next to it. I could't understand the plus sign in this report. Please help!


  • arichards (Veracode)

    The +/- in the report represents the change since the previous scan. It is correct to interpret that that in the static scan there are 5 medium flaws present in the current scan, and that there has been a reduction of 18 flaws since last scan.

     

    Likewise, in the dynamic scan there has been an increase of 3 flaws for a total of 3 flaws. Also note that the dynamic scan score went up by 98 from 0. This indicates that it was the first dynamic scan, when means there were 0 dynamic flaws previously, and in the first scan there were 3 flaws found, hence an increase of 3.

    Expand Post
    Selected as Best
  • arichards (Veracode)

    The +/- in the report represents the change since the previous scan. It is correct to interpret that that in the static scan there are 5 medium flaws present in the current scan, and that there has been a reduction of 18 flaws since last scan.

     

    Likewise, in the dynamic scan there has been an increase of 3 flaws for a total of 3 flaws. Also note that the dynamic scan score went up by 98 from 0. This indicates that it was the first dynamic scan, when means there were 0 dynamic flaws previously, and in the first scan there were 3 flaws found, hence an increase of 3.

    Expand Post
    Selected as Best
  • to846779 (Community Member)

    Fantastic! Thanks Austin.

     

    I have a question about score, can i ask or search for? I want to clarify the concepts. I don't know if i understand correctly.

Topics (2)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.