Home
Issues
Issues view provides access to the results of a scan. You can view results at a high level or select specific tests or objects and access more details. These details include how to fix, requests/responses, and differences between the test variants that resulted in issues. You can manipulate the severity of issues, resend tests (with or without modifications), and create reports based on Issues.
Issues: Result list
Searching and Filtering Security Issues in the Result List
In AppScan, managing and understanding security issues is crucial. To streamline this process, you can efficiently search and filter the Result List based on your specific needs.

Welcome
Welcome to the documentation for HCL AppScan Standard version 10.6.0
Getting started
This section provides a short tour of basic product features and procedures, including using the wizard to set up a scan.
Configuration
You configure a scan by choosing settings that best describe your application, and the kind of testing you want.
Manual exploring
Manual exploring enables you to explore specific parts of your application, filling in fields and forms as you go. This can be a way of ensuring that particular areas of the site are covered, and that AppScan has the information needed to complete forms correctly.
Scanning
Learn how to start a scan, and what happens during the scan; how to manually manipulate the Explore stage, and how to export the results of a scan.
Data
Data view is populated with information about the structure of the site during the Explore stage of the scan.
Issues
Issues view provides access to the results of a scan. You can view results at a high level or select specific tests or objects and access more details. These details include how to fix, requests/responses, and differences between the test variants that resulted in issues. You can manipulate the severity of issues, resend tests (with or without modifications), and create reports based on Issues.
- Issues: Application tree
- Issues: Result list
  - Issue severity levels
  - Issue state: Open or Noise
    Issues not relevant to your application can be designated as "Noise" and can be filtered from the results.
  - Resending tests
  - Right-click menu
  - Searching and Filtering Security Issues in the Result List
    In AppScan, managing and understanding security issues is crucial. To streamline this process, you can efficiently search and filter the Result List based on your specific needs.
  - Sorting the Result List
- Issues: Detail pane
- Report false positive test results
- Manual tests
- Non-vulnerables
Reports
This section describes how to generate reports from the scan results.
Tools
This section explains how to use additional tools provided with HCL AppScan Standard.
Integrations
This section describes integrations of other applications with AppScan Standard:
Best practices
This section contains some best practices and use cases for advanced users.
FAQ & Troubleshooting
CLI
This section describes the syntax and options available using the Command line interface.
References
Menus and toolbar summaries, and glossary

Searching and Filtering Security Issues in the Result List

In AppScan, managing and understanding security issues is crucial. To streamline this process, you can efficiently search and filter the Result List based on your specific needs.

About this task

You can filter the Result List for types of issues, or you can search for a specific issue. You can also use the Advanced search feature to search for specific strings within Request/Response or in the issues table.

Procedure

Basic search:
1. In the Search issuestext box, type a string to search issues containing the specified characters in the issues table.
Advanced search:
1. For a more refined search, click (advanced search option).
2. Use the In Request/Response text box to search for a string within Request/Response exclusively.
3. Use the In Issues table text box to search for a string in the issues table only (same as the basic search).
4. Combine both fields to search for specific strings in both Request/Response and the issues table simultaneously.
5. Click Search to initiate the process.
The issues are displayed in the Result List, based on your search criteria.
Filter Issues: Refine your view by applying filters based on Severity and Status:
1. Severity options include Critical, High, Medium, Low, and Informational.
2. Status options include Open and Noise.
The issues are displayed in the Result List, based on your filter options.

Example

Examples of Searches:

To find Cross-Site Scripting issues, type "cross" in the search box.
Locate login pages with issues by searching for "login."
Identify issues relevant to password manipulation using the search term "passwd."
To find all the issues that contain a specific header, type the header name.