> For the complete documentation index, see [llms.txt](https://scansuite.gitbook.io/scansuite/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://scansuite.gitbook.io/scansuite/usage/working-with-scan-results/checking-for-exploitable-vulnerabilities.md).

# Checking for exploitable vulnerabilities

The database of exploitable vulnerabilities (existence of public exploit was confirmed or it was used during malware campaigns) is provided via Vuln DB menu:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2F9dLX6JHGv5BwzLaMisxl%2Fimage.png?alt=media&amp;token=d551715e-ca7d-4422-874f-00f86603afae" alt=""><figcaption></figcaption></figure>

It supports full text search by all fields and allows to quickly check whatever certain CVE is exploitable or which exploitable vulnerabilities existing for certain product.

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2FseAvvbUitWPRvPZBXfja%2Fimage.png?alt=media&amp;token=947a0480-70f0-4c5d-95bd-c4dee83996d4" alt=""><figcaption></figcaption></figure>

On the top of that the results of Infrastructure (**OpenVAS**, **Nessus, Nuclei)** scans and code dependency checks (**Trivy)** are enriched by the info from this database. To view the enriched reports, download the ZIP archive via **Scan History** view by clicking on the **Report** button:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2FTvswZ5VKnUlxZQorWXdf%2Fimage.png?alt=media&amp;token=47ed2bbe-4094-4736-802e-9031821f79cb" alt=""><figcaption></figcaption></figure>

Then look for XLSX files, such as **trivy-dep-report.xslx**:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2Fi0JeXxbCevxrPvJ1Poxe%2Fimage.png?alt=media&amp;token=e57818f5-1167-46ca-ac78-4c22d3afc5e6" alt=""><figcaption></figcaption></figure>

Or the similar Nessus, OpenVAS, Nuclei report within the respective folder:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2F0jX0XV4xOy96mML96Dpf%2Fimage.png?alt=media&amp;token=e8a08580-ab17-450c-9bae-13668038cd7b" alt=""><figcaption></figcaption></figure>

Exploit availability is reflected via "Exploit" column:

<figure><img src="https://4294115650-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKyTIO2cfH1PztWRwJEe%2Fuploads%2F0RrCjKDVIp3HXXi0Ldr1%2Fimage.png?alt=media&amp;token=7a7b645c-d59d-44bd-bb58-008e153cb9df" alt=""><figcaption></figcaption></figure>
