the severity from Tenable .nessus is different between defectdojo

[stanleylin75]

the severity is different between tenable.sc and defectdojo

5979.zip

[manuel-sommer]

This is the reason. Could you provide the severity levels which are right?

[stanleylin75]

i think it's high as checked the NVD, MS, and tenable

https://www.tenable.com/plugins/nessus/211472

[manuel-sommer]

Yeah, it is high, but that is not the answer to my question. What severity levels will be reported by Nessus in a report and which severity level shall be reflected?
Here, in your file you have severity="4", but could there also be a severity="0"? And which number reflects which criticality?

[stanleylin75]

i mean the severity from tenable is High,

severity=4 means critical in CVSS 2.0, severity=3 -> High, severity=2 ->Medium, severity=1 -> Low, and severity=0 -> Info

[manuel-sommer]

This is how it is implemented, see screenshot above. And within the report it says severity = 4.

[manuel-sommer]

Could you take a look here @stanleylin75? Does it reflect the problem?
#10051

[stanleylin75]

good to close it, really helpful

[manuel-sommer]

could you close it yourself?

[mtesauro]

I got you 😃