Network Scan Findings
A network vulnerability refers to a weakness or flaw in a computer network that could potentially be exploited by malicious actors or software.
NOTE: Network Scan Findings data is sourced from a probe agent during a full or network scan. No network scan findings data will be displayed if no probe agent is present. This will also result in blank data for any 'network scan findings' report, and will also have blank data.
- Security < Continuous Threat Exposure Management < 'Network Scan Findings'
Network Scan Findings - Details
HTTP Security Header Vulnerabilities
We assess HTTP header vulnerabilities using data from trusted sources such as Vulners, Nessus, and the National Vulnerability Database (NVD). After thorough analysis, we assign scores based on CTEM standards to help prioritize remediation.
Access the Network Scan Findings from the Security -CTEM category.
Here is a sample list of network-based vulnerabilities.
| Vulnerability | CVE-ID | Brief Description |
| EternalBlue | CVE-2017-0144 | It exploits the Windows Server Message Block (SMB) protocol, which is notable for its role in WannaCry ransomware. |
| Apache Struts | CVE-2017-5638 | Affects Apache Struts, leading to remote code execution, exploited in the Equifax data breach. |
| Heartbleed | CVE-2014-0160 | It affects OpenSSL and allows unauthorized memory access, potentially exposing sensitive data. |
| BlueKeep | CVE-2019-0708 | Critical RCE vulnerability in Microsoft's Remote Desktop Protocol (RDP). |
| Pulse Secure | CVE-2019-11510 | Vulnerability in Pulse Secure VPNs allowing unauthorized access to sensitive information. |
| Internet Explorer | CVE-2018-8174 | Exploits a scripting engine vulnerability in Internet Explorer, leading to remote code execution. |
| Cisco ASA | CVE-2018-0101 | It affects Cisco Adaptive Security Appliance (ASA) software and allows remote code execution. |
| Windows CryptoAPI | CVE-2020-0601 | It affects Windows CryptoAPI, which could allow an attacker to spoof code-signing certificates. |
| Netlogon Elevation of Privilege | CVE-2020-1472 | Netlogon Remote Protocol (MS-NRPC) vulnerability allows attackers to gain elevated privileges. |
| Microsoft Office/Word | CVE-2017-0199 | Exploits a vulnerability in Microsoft Word, allowing remote code execution. |
Tap between the Assets to see the underlying data.
By default, the table shows the Active network scan findings. Use the drop-down to change to see any of the Suppressed records with details.
