Risk Factors
Overview
Risk Factors in Mend SCA help you prioritize findings by providing a single risk status for each dependency in your inventory, based on an aggregation of the existing Reachability, Exploitability and Maliciousness statuses.
Getting it done
The “Risk Factors” column can be found in the Dependencies section of your application or project. It’s available in various tables, e.g., Direct Libraries, Findings etc.
Figure A - The Risk Factors column displaying a single status (e.g., “Malicious")
Figure B - The Risk Factors column displaying an aggregated status (e.g., “Reachable + Exploitable")
The Risk Factors Filter
The Risk Factors column’s filter allows you to control the dependencies that are going to be displayed in the table, based on the aggregation of the Exploit Available, Reachable and Malicious statuses.
The filter’s logic is as follows: AND between the factors, OR between the values of each factor.
Legend
Exploit Available
Non Exploitable - No icon
Reachability Unavailable - No icon
Malicious
Not Malicious - No icon