Skip to content

/AWS1/CL_SAGFINDING

Represents a security vulnerability or issue discovered during testing

CONSTRUCTOR

IMPORTING

Required arguments:

iv_findingid TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Unique identifier for the finding

iv_agentspaceid TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Identifier of the agent space that created this finding

Optional arguments:

iv_pentestid TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Identifier of the parent pentest

iv_pentestjobid TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Identifier of the pentest job

iv_taskid TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Identifier of the associated task

iv_name TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Name or title of the finding

iv_description TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Detailed description of the security vulnerability

iv_status TYPE /AWS1/SAGFINDINGSTATUS /AWS1/SAGFINDINGSTATUS

Current status of the finding

iv_risktype TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Type of security risk identified

iv_risklevel TYPE /AWS1/SAGRISKLEVEL /AWS1/SAGRISKLEVEL

Severity level of the identified risk

iv_riskscore TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Risk score associated with the finding

iv_reasoning TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Justification for the assigned risk score

iv_confidence TYPE /AWS1/SAGCONFIDENCELEVEL /AWS1/SAGCONFIDENCELEVEL

Confidence level of the finding

iv_attackscript TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Proof-of-concept code demonstrating the vulnerability

io_coderemediationtask TYPE REF TO /AWS1/CL_SAGCODEREMEDTASK /AWS1/CL_SAGCODEREMEDTASK

Code remediation task associated with this finding

iv_lastupdatedby TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Identifier of the task or agent that last updated this finding

iv_createdat TYPE /AWS1/SAGTIMESTAMP /AWS1/SAGTIMESTAMP

Timestamp when the finding was created

iv_updatedat TYPE /AWS1/SAGTIMESTAMP /AWS1/SAGTIMESTAMP

Timestamp when the finding was last updated


Queryable Attributes

findingId

Unique identifier for the finding

Accessible with the following methods

Method Description
GET_FINDINGID() Getter for FINDINGID, with configurable default
ASK_FINDINGID() Getter for FINDINGID w/ exceptions if field has no value
HAS_FINDINGID() Determine if FINDINGID has a value

agentSpaceId

Identifier of the agent space that created this finding

Accessible with the following methods

Method Description
GET_AGENTSPACEID() Getter for AGENTSPACEID, with configurable default
ASK_AGENTSPACEID() Getter for AGENTSPACEID w/ exceptions if field has no value
HAS_AGENTSPACEID() Determine if AGENTSPACEID has a value

pentestId

Identifier of the parent pentest

Accessible with the following methods

Method Description
GET_PENTESTID() Getter for PENTESTID, with configurable default
ASK_PENTESTID() Getter for PENTESTID w/ exceptions if field has no value
HAS_PENTESTID() Determine if PENTESTID has a value

pentestJobId

Identifier of the pentest job

Accessible with the following methods

Method Description
GET_PENTESTJOBID() Getter for PENTESTJOBID, with configurable default
ASK_PENTESTJOBID() Getter for PENTESTJOBID w/ exceptions if field has no value
HAS_PENTESTJOBID() Determine if PENTESTJOBID has a value

taskId

Identifier of the associated task

Accessible with the following methods

Method Description
GET_TASKID() Getter for TASKID, with configurable default
ASK_TASKID() Getter for TASKID w/ exceptions if field has no value
HAS_TASKID() Determine if TASKID has a value

name

Name or title of the finding

Accessible with the following methods

Method Description
GET_NAME() Getter for NAME, with configurable default
ASK_NAME() Getter for NAME w/ exceptions if field has no value
HAS_NAME() Determine if NAME has a value

description

Detailed description of the security vulnerability

Accessible with the following methods

Method Description
GET_DESCRIPTION() Getter for DESCRIPTION, with configurable default
ASK_DESCRIPTION() Getter for DESCRIPTION w/ exceptions if field has no value
HAS_DESCRIPTION() Determine if DESCRIPTION has a value

status

Current status of the finding

Accessible with the following methods

Method Description
GET_STATUS() Getter for STATUS, with configurable default
ASK_STATUS() Getter for STATUS w/ exceptions if field has no value
HAS_STATUS() Determine if STATUS has a value

riskType

Type of security risk identified

Accessible with the following methods

Method Description
GET_RISKTYPE() Getter for RISKTYPE, with configurable default
ASK_RISKTYPE() Getter for RISKTYPE w/ exceptions if field has no value
HAS_RISKTYPE() Determine if RISKTYPE has a value

riskLevel

Severity level of the identified risk

Accessible with the following methods

Method Description
GET_RISKLEVEL() Getter for RISKLEVEL, with configurable default
ASK_RISKLEVEL() Getter for RISKLEVEL w/ exceptions if field has no value
HAS_RISKLEVEL() Determine if RISKLEVEL has a value

riskScore

Risk score associated with the finding

Accessible with the following methods

Method Description
GET_RISKSCORE() Getter for RISKSCORE, with configurable default
ASK_RISKSCORE() Getter for RISKSCORE w/ exceptions if field has no value
HAS_RISKSCORE() Determine if RISKSCORE has a value

reasoning

Justification for the assigned risk score

Accessible with the following methods

Method Description
GET_REASONING() Getter for REASONING, with configurable default
ASK_REASONING() Getter for REASONING w/ exceptions if field has no value
HAS_REASONING() Determine if REASONING has a value

confidence

Confidence level of the finding

Accessible with the following methods

Method Description
GET_CONFIDENCE() Getter for CONFIDENCE, with configurable default
ASK_CONFIDENCE() Getter for CONFIDENCE w/ exceptions if field has no value
HAS_CONFIDENCE() Determine if CONFIDENCE has a value

attackScript

Proof-of-concept code demonstrating the vulnerability

Accessible with the following methods

Method Description
GET_ATTACKSCRIPT() Getter for ATTACKSCRIPT, with configurable default
ASK_ATTACKSCRIPT() Getter for ATTACKSCRIPT w/ exceptions if field has no value
HAS_ATTACKSCRIPT() Determine if ATTACKSCRIPT has a value

codeRemediationTask

Code remediation task associated with this finding

Accessible with the following methods

Method Description
GET_CODEREMEDIATIONTASK() Getter for CODEREMEDIATIONTASK

lastUpdatedBy

Identifier of the task or agent that last updated this finding

Accessible with the following methods

Method Description
GET_LASTUPDATEDBY() Getter for LASTUPDATEDBY, with configurable default
ASK_LASTUPDATEDBY() Getter for LASTUPDATEDBY w/ exceptions if field has no value
HAS_LASTUPDATEDBY() Determine if LASTUPDATEDBY has a value

createdAt

Timestamp when the finding was created

Accessible with the following methods

Method Description
GET_CREATEDAT() Getter for CREATEDAT, with configurable default
ASK_CREATEDAT() Getter for CREATEDAT w/ exceptions if field has no value
HAS_CREATEDAT() Determine if CREATEDAT has a value

updatedAt

Timestamp when the finding was last updated

Accessible with the following methods

Method Description
GET_UPDATEDAT() Getter for UPDATEDAT, with configurable default
ASK_UPDATEDAT() Getter for UPDATEDAT w/ exceptions if field has no value
HAS_UPDATEDAT() Determine if UPDATEDAT has a value

Public Local Types In This Class

Internal table types, representing arrays and maps of this class, are defined as local types:

TT_FINDINGLIST

TYPES TT_FINDINGLIST TYPE STANDARD TABLE OF REF TO /AWS1/CL_SAGFINDING WITH DEFAULT KEY
.