Hi, I apologize in advance if this has been covered.
I am looking for a SQL Query to pull a list of vulnerabilities by age. Ideally, we would have a list of the vulnerabilities, age of the vulnerabilities and perhaps a count of the findings. This way we can tackle the oldest vulnerabilities within the environment.
Does anything like this exist already?
Any assistance would be appreciated.
Thanks
Hi,
It depends on a number of things such as whether you want to automate this or do it manually, if you want to include assets in the results etc. I’ll make an assumption that you want to do this manually and don’t need the specific affected assets as you haven’t mentioned them in your requirements.
The easiest way to do this is to go to Dashboards and open the ‘Vulnerability Dashboard’ from the Rapid7 Dashboard Templates.
Once you’ve created that one of the cards will show a grid of Age\Severity and show a count in each cell. The bottom left is the oldest, most critical so start with those. Click on a cell and it will open a table that you can export to CSV that lists all the vulns with the scores and affected asset count.