SecurityInsight settings · Settings > Risk Analysis reports

Only CVEs with known exploits

Key	SI_CVE_RequireExploit
Where	Settings > Risk Analysis reports > Vulnerability (CVE) filters
Type	On / off
Default	Off: CVEs are reported whether or not an exploit is known
Edition	Community
Confirmation	SecurityInsight asks you to confirm before it is switched on.

What it does

Limits the vulnerability (CVE) reports to vulnerabilities for which an exploit is known to exist.

When enabled

When on, every CVE without a known exploit is removed from the reports. Much shorter reports, but unexploited vulnerabilities are hidden.

When disabled

CVEs are reported whether or not an exploit is known

Risk and how to reverse it

Hides every vulnerability without a known exploit from the reports: real, patchable exposure becomes invisible to readers. Reversible at once (the next report shows them again).

Requires

Nothing else.