Reporting - Vulnerabilities by CVSSv3 at different points in time

InsightVM
1

Hi. Trying to generate a report or dashboard that will show me the number of vulnerabilities for a certain assset group at a certain point in time (end of previous month and the month before that). I have manged to use a dashboard to get the CVSSv2 at different points in time but I want the number of individual vulnerabilities per severity rating, not the total number in that group.

Any ideas?

2

Hi,

This will give you a simple CSV of Asset group, risk, crit\mod\sever vuln counts per asset group per date. You set start and end dates and the frequency (i.e. 1 month, 1 weeks etc) as required.

For example in the example below you’ll get 5 results per asset group for 1st Jan, 1st Feb etc

Then you can pivot the results in Excel.

SELECT 
dag.name as AssetGroup,
SUM(riskscore) as TotalRisk, 
SUM(critical_vulnerabilities) as TotalCritVuln, 
SUM(severe_vulnerabilities) as TotalSevVuln,
SUM(moderate_vulnerabilities) as TotalModVuln,
day 
FROM fact_asset_date('2025-01-01', '2025-05-01', INTERVAL '1 month')
JOIN dim_asset da ON da.asset_id = fact_asset_date.asset_id
JOIN dim_asset_group_asset daga ON da.asset_id = daga.asset_id
JOIN dim_asset_group dag ON dag.asset_group_id = daga.asset_group_id
GROUP BY dag.name,fact_asset_date.day
1 Like