What is the term for a vulnerability scan result that incorrectly reports a vulnerability on a system that is NOT actually vulnerable?

Question

Accepted Answer

C. False positive. A false positive occurs when a vulnerability scanner reports a vulnerability that does not actually exist on the target system. This can result from version-based banner detection where the scanner assumes vulnerability from software version alone without confirming the specific patch or configuration. False positives waste remediation effort and reduce report credibility.

What is the term for a vulnerability scan result that incorrectly reports a vulnerability on a system that is NOT actually vulnerable?

Related Questions

Discussion