Medium Vulnerability Results

Overview

The Medium Vulnerability Results widget provides a count of all medium-severity security vulnerabilities identified by SAST scanning within your codebase. This widget serves as a critical resource for IT Operations (IT Ops) and Security Operations (Sec Ops) engineers to maintain visibility and control over moderate-risk security issues that require prompt attention.

Value for IT and Security Engineers

Security Perspective

• Risk Assessment: Helps Sec Ops engineers identify and prioritize medium-severity vulnerabilities that present moderate security risks and could be exploited by attackers with some level of access or knowledge.

• Security Posture Monitoring: Provides visibility into vulnerabilities that, while not immediately critical, should be addressed promptly to maintain overall security posture.

• Vulnerability Remediation Planning: Enables teams to plan remediation efforts for vulnerabilities that require attention but may not demand emergency response procedures.

Operational Perspective

• Development Priority Management: IT Ops engineers can use this data to balance security remediation work with feature development, ensuring medium-priority security issues receive appropriate attention.

• Resource Allocation: Facilitates planning of development resources needed to address moderate-risk security vulnerabilities in a timely manner.

• Quality Assurance: Helps maintain code quality standards by ensuring medium-severity security issues are systematically identified and resolved.

Use Case Scenarios

• Sprint Planning: Incorporate medium-severity vulnerability remediation into development sprint planning to ensure consistent progress on security improvements.

• Risk Management: Use medium vulnerability counts to assess and communicate security risk levels to stakeholders and management.

• Security Metrics: Track medium-severity vulnerability trends as part of security KPIs and organizational security health metrics.

• Compliance Monitoring: Ensure timely remediation of medium-severity vulnerabilities to maintain compliance with security standards and frameworks.

By providing clear visibility into medium-severity security vulnerabilities, the Medium Vulnerability Results widget empowers IT Ops and Sec Ops teams to maintain balanced security risk management and ensure prompt attention to moderate-priority security issues.