# OpenVAS

PlexTrac supports importing XML files from **OpenVAS**. OpenVAS (Open Vulnerability Assessment System) is a network security scanner and vulnerability management solution designed to identify and assess vulnerabilities in network infrastructure and web applications. It performs scans of networks and hosts to identify open ports, running services, and potential vulnerabilities.

Below are the mappings of fields and any reference notes to provide context. If a field is not listed, PlexTrac does not currently import it.

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2FQ9XxTUlUzzz9pYJ86cNB%2Fopenvas.jpg?alt=media&#x26;token=1e7450c9-0077-42fc-8e83-1d885ff9941c" alt=""><figcaption></figcaption></figure></div>

## Finding Field Mappings

| PlexTrac Field  | OpenVAS Path                                                                                                                                                             | Notes                                                                                                                                                                                                                                                                                                                                                                             |                                                                                                                                                                                                                                                                                                                                                                   |
| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| title           | \<result>\<nvt>\<name>                                                                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                   |
| severity        | \<result>\<threat>                                                                                                                                                       |                                                                                                                                                                                                                                                                                                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                   |
| references      | <p>\<result>\<nvt>\<xref><br>\<result>\<nvt>\<certs>\<cert\_ref id=(parse out this id) type=(parse out this type)><br>\<result>\<nvt>\<cve><br>\<result>\<nvt>\<bid></p> | <p>A combination of:<br>\<xref>: we ignore "NOXREF" if populated in the \<xref> element <em>and</em><br><br>\<cert\_ref>: we take the id and type from all cert\_ref tags in the \<certs> element <em>and</em><br></p><p>\<cve>: we ignore "NOCVE" if populated in the \<cve> element <em>and</em> </p><p></p><p>\<bid>: we ignore "NOBID" if populated in the \<bid> element</p> |                                                                                                                                                                                                                                                                                                                                                                   |
| recommendations | \<result>\<nvt>\<tags>                                                                                                                                                   | <p></p><p>PlexTrac parses the element into separate items based on the                                                                                                                                                                                                                                                                                                            | delimiter that creates an array of key value pairs. Then we evaluate the array to compose description. Description is composed of the following values, if the key exists:</p><ul><li>summary</li><li>impact</li><li>insight</li><li>affected</li><li>vuldetect</li></ul>                                                                                         |
| description     | \<result>\<nvt>\<tags>                                                                                                                                                   | <p></p><p>PlexTrac parses the \<tags> element into separate items based on the                                                                                                                                                                                                                                                                                                    | delimiter that is used to create an array of key value pairs. Then we evaluate the array and compose recommendations from the following values, if the key exists:</p><ul><li>solution</li><li>solution\_type </li></ul><p>If solution is not in the array, we populate the solution with the phrase: "A solution was not provided by the scan source"</p><p></p> |
| score: \<cvss>  |                                                                                                                                                                          |                                                                                                                                                                                                                                                                                                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                   |
| label: cvss     |                                                                                                                                                                          |                                                                                                                                                                                                                                                                                                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                   |
| value           | \<result>\<nvt>\<cvss\_base>                                                                                                                                             |                                                                                                                                                                                                                                                                                                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                   |
| calculation     | \<result>\<nvt>\<tags>                                                                                                                                                   | <p></p><p>PlexTrac parses the element into separate items based on the                                                                                                                                                                                                                                                                                                            | delimiter that creates an array of key value pairs. Then we evaluate the array and compose cvss calculation: Calculation is composed of the following values, if the key exists:</p><ul><li>cvss\_base\_vector</li></ul>                                                                                                                                          |

## Asset Field Mappings

| PlexTrac Field | OpenVAS Path     |
| -------------- | ---------------- |
| asset          | \<result>\<host> |