Description
Fortify Hosted query to shows issues based on Category and Subcategory with wildcard
Solution
1). Login to Fortify SSC portal and go Applications.
2). Search for the application to check the Issues.
3). In this DAST application example a filter on Category only was applied and it returned results on that Category with different Subcategories.
filter:
category:Web Server Misconfiguration
4). Then applied a filter on Category and subcategory with wildcard %
filter:
category:Web Server Misconfiguration%Directory Listing
Actions can be taking on those Categories as needed.
Other examples of SAST applications filters are:
Example: 1:
category:Privacy Violation
category:Privacy Violation%Heap Inspection
Example 2:
In case there are many vulnerabilities with this same criteria:
Many Privacy Violation:Heap Inspection
Many on file: test.java
Many on line:199
You can define this query:
file:test.java AND line:199 category:Privacy Violation%Heap Inspection
Example 3:
This examples filters by priority:
[fortify priority order]:high [fortify priority order]:medium
Reference:
Fortify Hosted API query to retrieve multiple priority issues