Run the Patch Scan Differences Report
This report shows all patch scan data differences on 2 or more selected devices. If a patch is not listed on other devices, that patch information shows to note the difference.
Where the Data Comes From
This data is an accumulation of all patch scans uploaded into the system package area. It parses *.nessus
credential patch scan results (or uncredentialed if allowed in System Package Preferences), Rapid7 Nexpose .xml
patch scan results, or the .json
generic patch vulnerability results and separates out all the plugin (patch) data and parses it to put into the patch scan database. It comes back sorted by severity (critical, then high, then medium, then low, then informational) so you can quickly see the impact and risk associated with all the patch data in the system package.
As you upload patch scan results it adds new plugin data, updates older ones, and updates the patch data score.
Why Run this Report
This report allows you to focus on just patch scan data within your system package and quickly search it, finding patches that are open findings on some devices but not others. You could run this if you have identical types of devices and their patch status should be the same.