IVR Dashboard

The IVR Dashboard provides a real-time overview of your organization's exposure to security vulnerabilities, categorized by severity. It supports both CVSS (Common Vulnerability Scoring System) and VPR (Vulnerability Priority Rating) scoring systems, allowing teams to analyze and prioritize remediation efforts effectively.

Configure

To manage datasources:

  • Click the Configure button to view details of an existing data source.

  • To add a new data source, click Create datasource.

    → Refer to Creating a New Datasource for step-by-step instructions.

Datasource status meaning:

  • New: Datasource was added and is awaiting data ingestion.
  • Finished: Data has been successfully retrieved and is now visible in IVR.
  • Running: The system is currently fetching or processing data.
Edit datasource

  • Choose Edit from Actions to reopen the input form.

  • It is required to re-enter both Access Key and Secret Key, even if unchanged.

Delete datasource
  • Choose Delete from Actions to remove the data source entry.
    Important: You cannot delete a datasource that is currently in a running state. Wait for the process to complete before deleting.

Overview

The Overview section of the IVR Dashboard provides a high-level visualization of the organization’s vulnerability exposure. It includes three interactive charts that summarize key insights:

  • Critical Severity Exposures by (CVSS / VPR)

    Displays the number of critical vulnerabilities across different categories, with the ability to toggle between CVSS and VPR scoring systems.

  • Severity Breakdown by (CVSS / VPR)

    Shows a donut chart illustrating the distribution of vulnerabilities by severity level (Critical, High, Medium, Low).

  • Top 10 Vulnerabilities

    Presents a time-based bar chart of the ten most significant vulnerabilities, helping identify trends over recent periods.

Users can switch between Overview, List, and Configure modes using the buttons in the upper-right corner. Each chart includes a scoring filter toggle to switch between CVSS and VPR views, offering flexibility in how vulnerability data is analyzed.

Critical Severity Exposures by (CVSS / VPR)

This bar chart shows the number of vulnerabilities classified as critical, based on either CVSS or VPR scoring.

  • X-axis: Lists t??

  • Y-axis: Represents the count of critical vulnerabilities in each category??

Tip: Hovering over the VPR or CVSS column will display the exact score for that vulnerability record.

You can toggle between CVSS and VPR filters.

The current view is filtered by CVSS.

Severity Breakdown by (CVSS / VPR)

The chart provides a summary distribution of all identified vulnerabilities by severity level. It offers a quick glance at the risk landscape.

Current view is filtered by CVSS.

Top 10 Vulnerabilities

The Top 10 Vulnerabilities chart provides a time-based visual representation of the most significant vulnerabilities tracked within a specified period, helping you identify trends and emerging threats.

Export charts

To export charts click download icon in the upper right corner and choose preferred format: JPEG, PNG or PDF.

List

Tenable Vulnerability table

This table represents a list of detected vulnerabilities, allowing users to review and manage individual vulnerability instances in a structured and actionable format. Table Functionality of the table:

  • Selection Mechanism:

    Each row includes a checkbox that allows users to select one or more vulnerabilities. A master checkbox at the top enables bulk selection. Selected vulnerabilities can be targeted for remediation by clicking the Remediate button.

  • Filter Option:

    A filter icon is available in the top-left area of the table, allowing users to refine the list based on specific criteria (e.g., ID, CVE ID, published date).

The table includes the following columns:

  • Tenable Vulnerability. To see vulnerability details, click on the vulnerability. You will be able to see:

    • This includes a brief summary, a detailed description, and a solution for the specific vulnerability. You can also fix the vulnerability from here. Click Remediate and follow the steps given in the IVR Remediate flow page.
    • Contents show the Fixlets that are related to this specific vulnerability. Click on Fixlet to go to Fixlet details page.
    • Devices show the device that the specific Fixlet can be applied to. Click on Devices to go to Device Details page.
    • Deployment shows the deployment data. To learn how to deploy the Fixlet, go to Deploying Fixlets page.

  • ID: a unique identifier for each vulnerability

  • VPR: Vulnerability Priority Rating. Values include Low, Medium, High, and Critical.

  • CVSS: Common Vulnerability Scoring System.

  • CVE IDs: lists the Common Vulnerabilities and Exposures (CVE) identifiers associated with the vulnerability

  • Published: shows the publication date of the vulnerability

  • Tenable Count: indicates the number of instances or assets affected by the specific vulnerability within the environment

Export charts

To export the table click download icon in the upper right corner and choose preferred format: CSV or Excel.