Module 4: Vulnerability Assessment
Find and rank weaknesses systematically, separating real issues from noise. You will read CVE and CVSS data, compare scanner output with manual verification, and write a prioritised report a manager can act on.
- Level
- Beginner
- Study time
- 6 hours
- Lessons
- 6
- Practice labs
- 3
- Assessments
- 2
- Format
- Self-paced, online
What you will learn
By the end of this course you will be able to:
- Find, confirm, rank and report weaknesses responsibly.
- Calculate and interpret a CVSS v3.1 base rating from a vector string.
- Separate false positives from confirmed findings using manual verification evidence.
- Produce a prioritised remediation list that combines severity, exposure and asset criticality.
Before you start
Module 3: Active Reconnaissance: Scanning & Enumeration
Tools you will use
Course outline
6 lessons in 2 modules.
Sub-module 4.1: Finding & scoring vulnerabilities
- The vulnerability lifecycle, CVE and CVSS
- Scanners versus manual verification
- Handling false positives and false negatives
Sub-module 4.2: Prioritising & reporting
- Prioritising by severity, exposure and impact
- Anatomy of a good finding
- Worked example: from raw scan to ranked report
Practice labs and assessments
Labs run in the browser as simulations. They never touch a real system.
3 practice labs
- CVSS and CVE register workshop Beginner, 20 min
- Scanner output versus verification notes Intermediate, 30 min
- Full vulnerability assessment: confirm, rank and report Advanced, 40 min, final lab
2 assessments
- Module 4 knowledge check
- Module 4 final quiz
The pass mark is 70%. You can retake an assessment.
Take Module 4: Vulnerability Assessment
Request access and your instructor will set up your account.