SecurityInsight settings · Settings > Risk Analysis reports
CVE minimum severity
| Key | SI_CVE_MinSeverity |
|---|---|
| Where | Settings > Risk Analysis reports > Vulnerability (CVE) filters |
| Type | Text |
| Default | Off: CVEs of every severity are reported |
| Edition | Community |
What it does
Limits the vulnerability (CVE) reports to this severity and above: Critical, High or Medium.
When set
Setting it removes all less severe CVEs from the reports. Shorter, faster reports, but those findings are not shown anywhere in the report. An unknown value is ignored.
When blank or default
Left blank, the default applies: Off: CVEs of every severity are reported
Risk and how to reverse it
Changes what the Risk Analysis reports show, how findings are filtered or scored, or where reports go, from the next run; earlier reports are unchanged. Hiding findings can make real exposure invisible to readers. Reversible: change it back.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Only if you want the reports to focus on the most severe vulnerabilities.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack