Rapid7 Vulnerability Management Tables

The Rapid7 InsightVM Integration uses the following tables

Tables

Stores core metadata and scan results for assets detected by Rapid7 InsightVM.

Name	Type	Description
ConfigID	integer	Foreign key to the configuration or system settings (internal use).
AssetID	string	The unique identifier of the asset in Rapid7 InsightVM.
AssessedForPolicies	bit	Indicates if the asset was assessed for policy compliance.
AssessedForVulnerabilities	bit	Indicates if the asset was assessed for vulnerabilities.
CriticalVulnerabilitiesCount	integer	The total number of critical vulnerabilities detected on the asset.
ExploitsCount	integer	The count of known exploits that apply to the vulnerabilities found on this asset.
HostName	string	The hostname of the asset (local name or fully qualified domain name).
IP	string	The IPv4 or IPv6 address assigned to the asset.
LastAssessedForVulnerabilities	datetime	Timestamp of the last vulnerability assessment performed on the asset.
LastScanEnd	datetime	The date and time when the last scan of the asset finished.
LastScanStart	datetime	The date and time when the last scan of the asset began.
MAC	string	The MAC address of the asset, formatted as colon-separated hexadecimal pairs.

Contains detailed vulnerability scan results for assets, including network details, CVSS scores, risk metrics, and detection timestamps.

Name	Type	Description
ConfigID	integer	Identifier of the scan configuration or assessment context that produced the vulnerability result.
ID	integer	Unique identifier for this specific vulnerability result record.
OrgID	string	Identifier of the organization within InsightVM that owns or performed the assessment.
Rapid7InsightVMAssetID	string	Identifier of the asset where the vulnerability was detected.
Rapid7InsightVMVulnerabilityID	string	Identifier of the specific vulnerability found on the asset.
CheckKey	string	Unique key representing the vulnerability check that produced the result.
Port	integer	Network port number where the vulnerability was identified, if applicable.
Protocol	string	Network protocol (e.g., 'TCP', 'UDP') associated with the finding.
Nic	string	Network interface card or IP address where the vulnerability was detected.
Proof	string	Evidence or details showing how the vulnerability was confirmed on the asset.
FirstFoundTimestamp	datetime	Timestamp when the vulnerability was first discovered on the asset.
Since	datetime	Time duration or date since the vulnerability has existed on the asset.

Contains detailed information about known vulnerabilities tracked by Rapid7 InsightVM.

Name	Type	Description
ConfigID	integer	Foreign key to the configuration or system settings (internal use).
VulnerabilityID	string	The unique identifier of the vulnerability as returned by the Rapid7 InsightVM API.
Title	string	A short, human-readable title summarizing the vulnerability.
Description	string	A detailed explanation of the vulnerability, including its behavior and potential impact.
Severity	string	The qualitative severity rating of the vulnerability (e.g., 'critical', 'severe', 'moderate', 'low', 'informational').
SeverityScore	integer	The numerical severity score of the vulnerability, typically ranging from '0' to '10'.
RiskScore	float	A calculated risk score representing the potential impact and exploitability of the vulnerability (e.g., '0–1000' using the Rapid7 Real Risk™ model).
PCI_CVSSScore	float	The CVSS score of the vulnerability, adjusted based on PCI compliance rules.
PCI_Fail	bit	Indicates whether the vulnerability would result in PCI compliance failure ('true' if it fails, 'false' otherwise).
PCI_SeverityScore	integer	The severity score of the vulnerability as evaluated under PCI standards.
PCI_SpecialNotes	string	Any notes or commentary related to the vulnerability’s PCI compliance status.
PCI_Status	string	The PCI compliance status for the vulnerability.

Updated 3 months ago

Did this page help you?