Glossary

Vulnerability Assessment

Definition

What is a Vulnerability Assessment?

A Vulnerability Assessment is a systematic process used to identify, quantify, and prioritize security vulnerabilities in an organization’s systems, networks, or applications.

Unlike penetration testing, which involves actively exploiting vulnerabilities to assess their real-world impact, a vulnerability assessment focuses on discovering and cataloging potential weaknesses before they can be exploited by attackers.

The process begins with the discovery phase, where automated tools and scanners are employed to scan networks, systems, and applications for known vulnerabilities, such as unpatched software, configuration errors, and insecure default settings. After vulnerabilities are identified, they undergo analysis to determine their potential impact (using CVSS), including how easily they could be exploited and the possible damage from successful exploitation so that they can be prioritized based on severity, with categories like critical, high, medium, or low, depending on factors such as exploitability, the sensitivity of affected systems, and potential business impact.

The assessment concludes with a report that outlines the findings, including a list of identified vulnerabilities, their severity, and recommended mitigation strategies.

You may also find interesting

Business Impact Analysis

OpenVAS

You may also find interesting

Business Impact Analysis

OpenVAS

Glossary

Sandbox

A Sandbox is an isolated environment where code or software...

Read More

Hashing

Hashing is a cryptographic process that transforms an input ("message")...

Read More

Antivirus

The traditional Antivirus software is designed to detect, block, and...

Read More

MITRE

MITRE is a not-for-profit organization that operates federally funded research...

Read More

MITRE ATTACK

MITRE is a not-for-profit organization that operates federally funded research...

Read More