Home / Help centre / Results & findings
Results & findings
What does a finding ID like INJ-VULN-02 mean?
A finding ID like INJ-VULN-02 is a short label for one issue. It is built from a class prefix and a number, and INJ-VULN-02 belongs to the Injection class. You see it on the Summary tab of an issue, next to the severity, confidence and status badges.
The short version
Think of it as a short name for one issue. It lets you point a teammate at the exact finding without pasting its long title, which matters when a scan lists dozens of rows and several of them share similar wording. In INJ-VULN-02, the first part is the class prefix and the last part is a number. That example belongs to the Injection class, and the same issue also shows Injection in the Class field.
How it works in Cyberlop
Open any row on Issues, or on the Findings tab of a scan. The dialog opens on the Summary tab. Along the top you see a row of badges and fields:
| Field | What it tells you |
|---|---|
| Severity badge | How serious the issue is, such as Critical |
| Confidence | High, Medium or Low |
| Class | The kind of weakness, such as Injection |
| Status | How well it was proven: Confirmed, Likely or Unconfirmed |
| ID | The class prefix plus a number, such as INJ-VULN-02 |
The ID sits beside these badges on the same line. The prefix follows the class of the issue, so two issues from different classes carry different prefixes. The number tells one issue from another inside that class. Simple.
This is a label, not a score. A low number does not mean a more serious issue. For risk, read severity and confidence. They are kept apart on purpose. Our page on severity levels explains the first, and the status values explain how well an issue was proven.
What to do next
- Quote the ID, the target and the location whenever you talk to a teammate about a finding, so they can open the same row without any guesswork. The Summary tab shows all three.
- Do not rely on the Issues search box to find an ID. Its placeholder says it searches by title or location. Use the filters for severity, confidence, class and target instead.
- To track the work, set a disposition and an assignee, then click Update status.
The tutorial on how to read a finding walks through both tabs. If an ID looks odd to you, contact us and we will check it.
Related questions
- What severity levels does Cyberlop use?
- What's the difference between Confirmed, Likely and Unconfirmed?
- How do I see the full details of a finding?
- What's the difference between a finding's Status and its Triage state?
- Searching for a finding ID on the Issues page finds nothing. Why?
How to read a finding in Cyberlop: Summary and Evidence
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.