Which vulnerabilities are considered elevated?

While all vulnerabilities should be reviewed and remediated as soon as possible, some areas of the report pose more significant risk to your client than others. 

Any unsecured Remote Access ports are considered elevated vulnerabilities that require immediate attention. You can read more information regarding the potential risks of these vulnerabilities, as well as the steps required for remediation in the Remote Access Section Guide.

The Hosting Security Section also contains elevated vulnerabilities. Each vulnerability in this section contains a rating based on the Common Vulnerability Scoring System (CVSS). Any vulnerability rated 8 or higher should be considered an elevated vulnerability that requires immediate attention. You can read more about these vulnerabilities, as well as the steps required for remediation in the Hosting Security Section Guide.