SQL Vulnerability Email

Question

SQL Vulnerability Email

NO 0

I keep getting an email notification showing a few "failing checks,"

User's image

but when I click on the "View results" and go to "Vulnerability Assessment Page" it shows a big ZERO for all categories. Hmmm?

User's image

Ravi Kanth Koppala 3,396 Reputation points Microsoft Employee Moderator

2023-11-22T19:37:02.15+00:00
@NO .

Based on the information provided in the context, the email notification you received may be a false positive. You mentioned that when you clicked on "View Results" and went to the "Vulnerability Assessment Page," it showed a big ZERO for all categories. This could indicate that no actual vulnerabilities are found in your SQL Server despite the email notification suggesting otherwise.

You may want to check the scan results file attached to the email notification to confirm this. If the scan results file shows zero vulnerabilities, it is likely a false positive. You can report this inaccuracy by following the steps outlined in the "Report inaccuracy" section of the "Vulnerabilities in my organization" context.

References:

Vulnerability assessment for SQL Server

Find and remediate vulnerabilities in your Azure SQL databases

Vulnerabilities in my organization

Note: Response generated using Microsoft Q&A AI Assit.
Givary-MSFT 35,681 Reputation points Microsoft Employee Moderator

2023-11-23T08:46:46.9+00:00

@NO Thank you for reaching out to us, As I understand you want to know more details on SQL vulnerability email notification.

This issue needs deeper investigation in terms of how the configuration is done, any exemptions has been created on DB ?

Please send us an email on azcommunity [at] microsoft [dot] com referencing this issue with a subject line "ATTN:Givary" along with your Azure subscription id and we will help you with free support option on this issue.

Your answer

Ravi Kanth Koppala 3,396 Reputation points Microsoft Employee Moderator

2023-11-22T19:37:02.15+00:00

@NO .

Based on the information provided in the context, the email notification you received may be a false positive. You mentioned that when you clicked on "View Results" and went to the "Vulnerability Assessment Page," it showed a big ZERO for all categories. This could indicate that no actual vulnerabilities are found in your SQL Server despite the email notification suggesting otherwise.

You may want to check the scan results file attached to the email notification to confirm this. If the scan results file shows zero vulnerabilities, it is likely a false positive. You can report this inaccuracy by following the steps outlined in the "Report inaccuracy" section of the "Vulnerabilities in my organization" context.

References:

Vulnerability assessment for SQL Server

Find and remediate vulnerabilities in your Azure SQL databases

Vulnerabilities in my organization

Note: Response generated using Microsoft Q&A AI Assit.
Givary-MSFT 35,681 Reputation points Microsoft Employee Moderator

2023-11-23T08:46:46.9+00:00

@NO Thank you for reaching out to us, As I understand you want to know more details on SQL vulnerability email notification.

This issue needs deeper investigation in terms of how the configuration is done, any exemptions has been created on DB ?

Please send us an email on azcommunity [at] microsoft [dot] com referencing this issue with a subject line "ATTN:Givary" along with your Azure subscription id and we will help you with free support option on this issue.

Share via

SQL Vulnerability Email

Your answer