Viewing Issues in Acunetix 360

The Issues window displays lists of vulnerabilities detected in scans run by your entire team. You can get an overview of Issues that have been assigned to you, those that are awaiting a Retest and those that are Addressed.

Administrators and Project Managers benefit from an overview of all Issues, including the current State of each Issue and to whom it has been assigned.

Information

You can also view issues using the Issues API Endpoints, enabling you to easily integrate with other applications or internal systems.


For further information, see
Managing Issues and User Permissions Matrix in Acunetix 360.

Issues Lists

This table lists and explains the lists available from the submenus in the Issues window.

List

Description

To Do

This window displays a list of all the Issues that have been assigned to you. You can take action by fixing them, assigning them to someone else, or changing their status.

The number next to the menu name indicates how many outstanding items you have on your To-Do list.

In the Status column for each newly identified vulnerability, it will read Present. Once you click Retest, it will change to Fixed (Unconfirmed).

Waiting for Retest

This window displays a list of all Issues whose State has been updated to Fixed (Unconfirmed). They are waiting to be tested automatically by Acunetix 360.

Addressed Issues

This window displays a list of all the Issues that have been addressed and whose State has been updated to one of the following:

Accepted Risk        Indicates that the Issue has been considered and is marked as a low risk vulnerability

False Positive        Indicates that the Issue has been considered and is marked as not a genuine vulnerability

Fixed (Confirmed)        Indicates that the Issue has been fixed and confirmed by Acunetix 360, and so requires no further action

Users with Manage Issues (Restricted) permission can only mark an Issue’s state as 'Fixed (Confirmed)'.

All Issues

This window displays a list of all Issues detected in scans run by your entire team. The entire team can view all Issues in a scan report, even if they only have the Manage Issues (Restricted) permission.

Issue page fields

This table lists and explains the fields listed in the Issues window's columns and in an individual Issue window.

Field

Description

Title/Issue

This is the name of the vulnerability, such as Internal Server Error.

Severity

This is the vulnerability severity level. The options are:

  • Critical
  • High
  • Medium
  • Low
  • Information
  • Best Practice

For further information, see Vulnerability Severity Levels.

Website Group/Website

This is the name of the scanned website.

URL/Issue URL

This is either the website address of the scanned website or the URL of the detected issue.

First Seen

This is the date and time the issue was first detected.

Last Seen

This is when the issue was most recently detected.

Tags

This is the label given to an issue to group and/or give additional context. For further information, see Tagging issues in Acunetix 360.

Assignee

This is the name of the person who has been assigned the task. It may be:

  • The Technical Contact for the scanned website
  • The Team Member who initiated the scan
  • Any other member of the team

Retestable

This indicates whether the issue can be retested.

Status

This indicates the current status of the issue. All Issues are initially marked as Present.

  • Present– This indicates that the Issue has been present.
  • Accepted Risk– This indicates that the Issue has been considered and is marked as a low risk vulnerability.
  • False Positive– This indicates that the Issue has been considered and is marked as not a genuine vulnerability.
  • Fixed (Unconfirmed)– This indicates that the Issue has been fixed but not confirmed by Acunetix 360.
  • Fixed (Confirmed)– This indicates that the Issue has been fixed and confirmed by Acunetix 360, and so requires no further action.
  • Fixed (Can't Retest)– This indicates that the Issue has been found but Acunetix 360 cannot retest to confirm whether the Issue has been fixed or not.
  • Ignored– This indicates that the Issue was ignored by the user. In Acunetix 360, to ignore an issue, you update its status as "accepted risk".
  • Revived– This indicates that the issue had been fixed in previous scans but revived again.
  • Scanning– This indicates that Acunetix 360 has been scanning the vulnerability.

For further information, see Addressed Issues and Issue Lifecycle.

State

This indicates the current state of the issue. The state levels are explained as follows:

  • New – This indicates that this issue has been identified for the first time.
  • Not Found – This indicates Acunetix 360 had not found this vulnerability in that scan
  • Not Fixed – This indicates the vulnerability has not been fixed.
  • Fixed – This indicates the vulnerability has been fixed.
  • Revived – This indicates that the issue had been fixed in previous scans but revived again

Opened By

This indicates who identified issue(s).

Addressed

This indicates that issues have been addressed or whose State has been updated.

How to View an Issue in Acunetix 360

From the main menu, click Issues, then To Do. (Alternatively, you can select another submenu.) A list of issues is displayed.

For further information, see Issues Lists.

 

« Back to the Acunetix Support Page