Vulnerability Scan Results Imports and Actions

FutureFeed allows you to import vulnerability scan results from any scanner and automatically create actions from those results.  To import a vulnerability scan:

1. Export vulnerability scan results from scanning tool.
   1. Many vulnerability scanning tools allow the scan results to be exported as Comma Separated Value, or CSV, files.  FutureFeed supports importing CSV and XML files.
   2. Ensure data for each of the following fields (or at least those that your organization deems relevant) are included in the exported scan results:
      1. Asset ID - The name of the asset (device) that was scanned
      2. CVE - Common Vulnerabilities and Exposures, a unique ID assigned by the US-CERT.
      3. Host - IP address of the asset
      4. CVSS v3.0 Base Score - The Common Vulnerability Scoring System (CVSS) is an open framework for communicating the characteristics and severity of software vulnerabilities. CVSS consists of three metric groups: Base, Temporal, and Environmental. The Base metrics produce a score ranging from 0 to 10, which can then be modified by scoring the Temporal and Environmental metrics. Two common uses of CVSS are calculating the severity of vulnerabilities discovered on one's systems and as a factor in prioritization of vulnerability remediation activities. The National Vulnerability Database (NVD) provides CVSS scores for almost all known vulnerabilities.
      5. Protocol - The network protocol associated with the vulnerability that was discovered.
      6. Port - The network port on which the vulnerability was discovered.
      7. Name - The common name of the vulnerability.
      8. Synopsis - A short description of the vulnerability.
      9. Description - A more detailed description of the vulnerability.
      10. Solution - The solution published by the team reporting the vulnerability and/or the organization whose software and/or hardware is presenting the vulnerability.
      11. CVSS v3.0 Temporal Score - Metrics that change over time due to events external to the vulnerability, such as how often the vulnerability is being actively exploited.
2. Click the Upload Scan button.
3. Click the Upload data from file button.
4. Navigate to your file, select the file, and click Open.
5. Map the vulnerability scan fields to the FutureFeed fields (see this article for more details, include descriptions of the fields and their types).

• Nessus by Tenable
• OpenVAS by Greenbone Security
• InsightVM (Nexpose) from Rapid7