Step 3: Reviewing Scan Results

The dashboard shows a summary of the scan's configuration, status, data and results.

Data view showss lists of content items found in your application. This can be a useful way of verifying that the scan is configured in a way that will cover your application, before you begin the Test stage.

• Application tree: Shows the URL and folder nodes.
• Result list: Shows application data, sorted by scan results (see Data: Result list). For example, you can choose to see a list of broken links, of JavaScript™, of cookies, and so on.
• Detail pane: Shows the request sent to a page and the response that was received.

To learn more about the Application Data view, see Data view.

Issues view provides comprehensive data of the security issues discovered by the scan.

• Application tree: Shows the folders, URLs, and files that AppScan discovered in your application are listed. The number next to each node in the tree indicates how many issues were found.
• Result list: Shows an icon per issue, indicating the severity value that is assigned to this issue (see Issues: Result list). Each issue also holds a consolidation of the URLs that are vulnerable to this issue. Under each URL, is a listing of the vulnerable data.
• Detail pane: Displays information to enable you to understand why this is an issue, what it can do if gone untreated, how to fix, the variants of the test requests that were sent, the response of your application for which AppScan marked the test as an issue, and more.

To learn more about the Issues view, see Issues view.

The scan log can be opened or closed from all views, using the Scan log icon at the right side of the status bar at the bottom of the screen.