SQL query greater/less than

InsightVM SQL Queries
2

I’ve got a query saved here that could be a good starting point. It pulls basic host and vulnerability info, and has conditions for the CVSS and risk score that you’re looking for.

select da.ip_address, da.host_name, dv.nexpose_id, dv.title,
       dv.cvss_score, dv.riskscore
from fact_asset_vulnerability_finding favf
join dim_asset da
on favf.asset_id = da.asset_id
join dim_vulnerability dv
on favf.vulnerability_id = dv.vulnerability_id
where dv.cvss_score > 8
and dv.riskscore > 900
group by da.ip_address, da.host_name, dv.nexpose_id, dv.title,
         dv.cvss_score, dv.riskscore

If there’s additional info you’d like to pull in for assets or vulns, you could look at the dim_asset or dim_vulnerability tables to see which fields are available.

1 Like