How is the Average Risk Level on a host calculated?Answered
On the main Scans page, there's a "Most Vulnerable Hosts" statistic, and one of the columns is "Average Risk Level". Is that calculated mathematically or is it determined by the risk level that has the most vulnerabilities regardless of what is the actual average?
The average risk level is calculated mathematically.
For all the vulnerabilities of a Host, a host group, or a vzone, the risk score of the vulnerabilities are added together and the sum is divided by the number of vulnerabilities. This average numerical value is then translated into an average risk level: High, medium etc.
Please sign in to leave a comment.