How is the Average Risk Level on a host calculated?

On the main Scans page, there's a "Most Vulnerable Hosts" statistic, and one of the columns is "Average Risk Level".  Is that calculated mathematically or is it determined by the risk level that has the most vulnerabilities regardless of what is the actual average?

1 comment

  • Avatar
    Jesper Jurcenoks Official comment

    The average risk level is calculated mathematically.

    For all the vulnerabilities of a Host, a host group, or a vzone, the risk score of the vulnerabilities are added together and the sum is divided by the number of vulnerabilities. This average numerical value is then translated into an average risk level: High, medium etc.

    Edited by Jesper Jurcenoks
Please sign in to leave a comment.