overrides

Severity overrides.

  • Toolset name: overrides

  • Enabled by default: yes

  • Tools: 5 (2 read-only)

Tools

openvas_create_override

Create override · mutating

Create a severity override for an NVT (e.g. mark a finding as false positive by overriding to 0.0). Not idempotent.

Parameter

Type

Required

Description

active

boolean

no

Whether the override is active

hosts

array

no

Restrict to these hosts

new_severity

string

no

Severity to report instead (string per GMP, e.g. “0.0” for false positive)

nvt_oid

string

yes

OID of the NVT the override applies to

orphan

boolean

no

Keep the override even when its result no longer exists

port

string

no

Restrict to a port, e.g. “22/tcp”

result_id

string

no

Attach to one specific result by UUID

severity

string

no

Match results with this severity (string per GMP, e.g. “7.5”)

task_id

string

no

Restrict to one task by UUID

text

string

no

Justification text

openvas_delete_override

Delete override · destructive

Delete a severity override (to the trashcan by default; ultimate deletes permanently).

Parameter

Type

Required

Description

id

string

yes

Resource UUID

ultimate

boolean

no

Permanently delete instead of moving to the trashcan (default false)

openvas_get_override

Get override · read-only

Get one severity override by UUID.

Parameter

Type

Required

Description

id

string

yes

Resource UUID

openvas_list_overrides

List overrides · read-only

List severity overrides.

Parameter

Type

Required

Description

filter

string

no

GMP filter expression, e.g. name~webserver and severity>5

filter_id

string

no

UUID of a saved filter to apply

page

integer

no

Page number, 1-indexed (default 1) (min 0)

per_page

integer

no

Items per page, 1-1000 (default 25) (min 0)

openvas_update_override

Update override · destructive

Update a severity override. Idempotent (PUT): omitted fields stay unchanged.

Parameter

Type

Required

Description

active

boolean

no

hosts

array

no

id

string

yes

UUID of the override to update

new_severity

string

no

orphan

boolean

no

port

string

no

result_id

string

no

severity

string

no

task_id

string

no

text

string

no