WebInspect Report

[emmanuelj]

Hello,

I am new to HP WebInspect tool and any help will be greatly appreciated. I need to create a custom report after each scan and the format is not the same as the pdf. I need the report to be in excel format with certain fields (ie. Column title- Vulnerability, severity, location, description, implication, fix and reference).  Is it any way I can get report in excel with the only with required fields?

Best,

EJ

[HansEnders]

emmanuelj;

With the WebInspect 10.40 release, the Report Design tool was removed.  Actually, it was hardly ever used with success, but it is still present in WebInspect 10.40 by searching its name, but it appears to be fully gone from 10.50.

The good news is that you may not need this at all.  I believe you will get everything you want by running the vulnerability Summary report and choosing the Save As option for XLS format.  You could then open that in Excel, and perhaps rearrange or clean the rows and columns as suits your need.

Separately, you could also get this data from the Full Export.  This is found under the File menu > Export > Scan Details > Full (XML).  This will dump the entire Site Tree worth of session, plus all of the vulnerabilities and those remediation Report Fields you need.  You would need to write your own transformation script to extract only what you need into Excel.

[emmanuelj]

How do I get the 10.5 version? Our version is is 10.4 and I could not update to 10.5.

[HansEnders]

The best method to update WebInspect is to run the SmartUpdate feature.  This is enabled by default to run on start-up, unless the user has disabled it under the Edit menu > Application Settings > SmartUpdate.  You may also trigger it manually from the SmartUpdate button found on the Toolbar area.  Depending on your network constraints, you may also need to adjust the Proxy settings found under the Application Settings in order to reach the Internet.  The update addresses being queried will be https://smartupdate.hpsmartupdate.com and https://licenservice.hpsmartupdate.com.  If you have no Internet connection, then you will need to contact Fortify Support (support.fortify.com) in order to be given a location and process for manually downloading the SecureBase file(s) to update your machine.

If you prefer to manually download and install the next release, you would log into the HP SSO portal (Self-Service On-line, softwaresupport.hp.com).  This site will require a (free) HP Passport account ("HPP") to login, and then you must associate your company's SAID number(s) in the My Entitlements section before your purchased HPE Fortify products will become visible for Download.