Reference
Vulnerability Management glossary
Terms used in Vulnerability Management and its documentation.
Applies to Vulnerability Management as it works today. Moraph updates the platform continuously, and this page is reviewed when it changes.
Terms used in Vulnerability Management and its documentation.
| Term | Meaning |
|---|---|
| Authenticated scan | A scan that logs in to a system with credentials so it can see missing patches and configuration weaknesses. |
| Coverage gap | An asset in scope that was not scanned, or was scanned without credentials, in the period. |
| Credential failure | A scan run where Tenable could not log in to a host, usually because an account expired, was locked or lacked permission. |
| CVSS | Common Vulnerability Scoring System, the standard severity score published for a vulnerability. |
| Vulnerability Priority Rating | Tenable's rating that adds threat information to severity to show which vulnerabilities are more likely to be exploited. |
| Risk acceptance | A recorded decision by your institution not to fix a finding for now, with a reason, compensating controls, approver and expiry date. |
| Remediation target | The time your institution allows to fix a finding of a given severity. |
| Fix verification | A rescan that confirms a vulnerability is gone before the finding is closed. |
| Unknown asset | A device Tenable discovered that is not in your asset inventory. |
| External exposure scan | A scan of your internet-facing addresses from outside your network. |
Was this page helpful?
Report a problem with this page
Need help with your own setup rather than this page? Raise a support ticket.