SecurityInsight settings · Settings > Risk Analysis reports
CVE minimum CVSS score
| Key | SI_CVE_MinCvssScore |
|---|---|
| Where | Settings > Risk Analysis reports > Vulnerability (CVE) filters |
| Type | Number |
| Default | Off: CVEs of every score are reported |
| Edition | Community |
What it does
Limits the vulnerability (CVE) reports to vulnerabilities at or above this CVSS score (0 to 10).
When set
A value above 0 removes lower-scored CVEs from the reports, making them shorter and faster but hiding those findings completely.
When blank or default
Left blank, the default applies: Off: CVEs of every score are reported
Risk and how to reverse it
Changes what the Risk Analysis reports show, how findings are filtered or scored, or where reports go, from the next run; earlier reports are unchanged. Hiding findings can make real exposure invisible to readers. Reversible: change it back.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Only if you want to focus on high-impact vulnerabilities, for example 7.0.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack