Use the vulnerability list

Use this article when you want to triage, filter, or prioritize vulnerabilities from the main vulnerability table.

What to check first

• Open the Vulnerabilities view.
• Check whether the default filters are hiding resolved, closed, untriaged, non-default-branch, or all-branch findings.
• Use Filters to narrow by type, status, severity, impact, asset, application, assignee, branch, tag, or path.
• Use Secret Assessment to separate Provider check and Context assessment secret findings.

Important columns

• Vulnerability: severity, title, type-specific context, and a Provider check or Context assessment badge for secret findings.
• Asset: repository or source where the vulnerability appears.
• Introduced: when Cysmiq first detected the vulnerability.
• Impact: attacker outcomes such as account takeover, data access, or command execution.
• Lifecycle: current status and resolution when set.
• Assignee: current owner and assignment controls.

Secret assessment methods

• Provider check: Cysmiq checks a supported credential with its provider to determine whether it is valid and active.
• Context assessment: when a provider check is unavailable, Cysmiq reviews the detection and source context to help determine whether it is actionable.

Common actions

• Open a row to review the full vulnerability detail page.
• Select multiple rows to change status or resolution in bulk.
• Export selected rows when you need an offline list.
• Save recurring filter sets as saved views for repeated workflows.

Canonical docs

For the maintained reference, see Vulnerability list view.

Contact support if

• A vulnerability you expect to see does not appear after filters are cleared.
• Counts in the table do not match another view or report.
• A row is missing asset, lifecycle, assignee, or vulnerability context.