Extend 'Expires On' date on a vulnerability exception

When we create a vulnerability exception, we put an Expires On date on it. The logic being we should periodically come back and review that exception and confirm it is still required, rather than leaving it in place for ever.

Is there a way to edit an exiting vulnerability exception to extend this date? Or do we have to recreate it completely with the new date?

2 Likes

This would be a great option. Today I had to delete an already existing exception to create a new one with an extended end date.

Hi gnewman,

I have found you can “extend” the expiry date of a Vulnerability Exception using the Rapid7 InsightVM API. You’ll need to find the ID of the Vulnerability Exception and send a PUT request to InsightVM API (v3) with the body containing the new date in the future:

There doesn’t seem to be any functionality to do this in the InsightVM Security Console but it would be nice to have.