Viewing AVS Data

AVS Data - Security Findings

To explore AVS data for Security Findings:

1. Filter the Security Findings table by assets that have the AVS field.

   

2. Select a Security Finding, click the numeric value of the AVS Risk Score field, and select Open Link.

   

3. The Asset Profile page opens in a new tab, showing a breakdown of the AVS Factors used in calculating the AVS Risk Score. The AVS Factors table includes the following fields:

   • Factor - Can point to different attributes of the asset on which the vulnerability was found or the vulnerability itself, for example: Product Type (Application, Hardware, OS, etc.), the EPSS score of the vulnerability (Very High, High, Moderate, or Low), whether the product is Open Source or Privately Owned, and more.

   • Value - The value of the factor, for example, EPSS score = Low EPSS Score.

   • Impact - The actual contribution of the factor to the overall risk, based on the factor's value.

     • Risk-increasing factors are highlighted in red (Example: No Auth Required)

     • Risk-reducing factors are highlighted in green (Example: Low EPSS Score)

     • Neutral factors are highlighted in grey (Example: No Perimeter Security Role)

See Fields Used in AVS Calculation for the full list of factors, their values and their impact.

The AVS Score appears above the table in grey, and next to it - a None/Low/Medium/High/Critical severity. The severity is calculated by the range of the vulnerability's CVSS Score:

See Asset Profile Page Tabs for information on the different actions you can perform from this page (create tickets, add tags, etc.)

AVS Data - Aggregated Security Findings and Vulnerability Repository

On both the Aggregated Security Findings and Vulnerability Repository pages, AVS factors are stored as asset fields, so you can filter assets by individual factor values and impacts using the Query Wizard.

To add AVS data to Aggregated Security Findings or the Vulnerability Repository table, on either page:

1. Open the Query Wizard.

2. On the first query row, in the Field dropdown, type "AVS" and go to the AVS Factors section. Alternatively, type the name of the specific AVS factor you want to add.

   

3. Expand the field you want to filter assets by and select either Impact or Value.

   

4. Select an operator from the Operators dropdown. Learn more about Using Operators in the Query Wizard.

5. Enter a comparison value.

When you select the equals operator, the Query Wizard provides a list of the available values to choose from. You can add a custom value, if needed.

Example: when selecting the field AVS Factors: Exploit Maturity: Impact, there are three preexisting values to choose from:

To add a custom value, type it in the dropdown's searchbox and press Enter. It is added to the available value list.

6. Add fields to the query as needed, then click Search. To add a queried field to the table, click Add field to columns (second button from the left next to the provided value) or do it using the Edit Table module.
7. See the filtered results:

AVS Data on the Asset Profile Page

When clicking an asset from the Aggregated Security Findings or the Vulnerability Repository tables to open its Profile page, AVS Factors fields do not show in the general All Fields table (the default table displayed when opening the asset Profile), nor can they be added to it using the Edit Table button. To view AVS Factors data, go to Axoinus Risk Score > AVS Factors, as demonstrated here: